51a52,83 > # SSL Cipher Suite: > # List the ciphers that the client is permitted to negotiate. See the > # ciphers(1) man page from the openssl package for list of all available > # options. > # The value "SSLCipherSuite" has been set via UCR variable "apache2/ssl/ciphersuite" > @!@ > if configRegistry.get('apache2/ssl/ciphersuite'): > print 'SSLCipherSuite %s' % configRegistry.get('apache2/ssl/ciphersuite') > @!@ > > # SSLHonorCipherOrder > # Option to prefer the server's cipher preference order > # When choosing a cipher during an SSLv3 or TLSv1 handshake, normally the > # client's preference is used. If this directive is enabled, > # the server's preference will be used instead. > # Default: SSLHonorCipherOrder off > # The value "SSLHonorCipherOrder" has been set via UCR variable "apache2/ssl/honorcipherorder" > @!@ > if configRegistry.get('apache2/ssl/honorcipherorder'): > print 'SSLHonorCipherOrder %s' % configRegistry.get('apache2/ssl/honorcipherorder') > @!@ > > # SSLCompression > # This directive allows to enable compression on the SSL level. > # Default: SSLCompression off > # Warning: Enabling compression causes security issues in most setups (the so called CRIME attack). > # The value "SSLCompression" has been set via UCR variable "apache2/ssl/compression" > @!@ > if configRegistry.get('apache2/ssl/compression'): > print 'SSLCompression %s' % configRegistry.get('apache2/ssl/compression') > @!@ >