Attachment 6676 Details for Bug 37566

[patch] Patch adding more fine-grained configuration of mod_ssl

ssl.conf.patch (text/plain), 1.44 KB, created by Lutz Willek on 2015-02-15 18:02 CET

(hide)

Description:

Filename:

MIME Type:

Creator: Lutz Willek

Created: 2015-02-15 18:02 CET

Size: 1.44 KB

patch

obsolete

>51a52,83
>> #   SSL Cipher Suite:
>> #   List the ciphers that the client is permitted to negotiate. See the
>> #   ciphers(1) man page from the openssl package for list of all available
>> #   options.
>> #   The value "SSLCipherSuite" has been set via UCR variable "apache2/ssl/ciphersuite"
>> @!@
>> if configRegistry.get('apache2/ssl/ciphersuite'):
>> 	print 'SSLCipherSuite %s' % configRegistry.get('apache2/ssl/ciphersuite')
>> @!@
>> 
>> #   SSLHonorCipherOrder
>> #   Option to prefer the server's cipher preference order
>> #   When choosing a cipher during an SSLv3 or TLSv1 handshake, normally the 
>> #   client's preference is used. If this directive is enabled, 
>> #   the server's preference will be used instead.
>> #   Default: SSLHonorCipherOrder off
>> #   The value "SSLHonorCipherOrder" has been set via UCR variable "apache2/ssl/honorcipherorder"
>> @!@
>> if configRegistry.get('apache2/ssl/honorcipherorder'):
>> 	print 'SSLHonorCipherOrder %s' % configRegistry.get('apache2/ssl/honorcipherorder')
>> @!@
>> 
>> #   SSLCompression
>> #   This directive allows to enable compression on the SSL level.
>> #   Default: SSLCompression off
>> #   Warning: Enabling compression causes security issues in most setups (the so called CRIME attack).
>> #   The value "SSLCompression" has been set via UCR variable "apache2/ssl/compression"
>> @!@
>> if configRegistry.get('apache2/ssl/compression'):
>> 	print 'SSLCompression %s' % configRegistry.get('apache2/ssl/compression')
>> @!@
>>

Actions: View | Diff

Attachments on bug 37566: 6676 | 6677