--- file_not_specified_in_diff +++ file_not_specified_in_diff @@ -52,0 +52,32 @@ +# SSL Cipher Suite: +# List the ciphers that the client is permitted to negotiate. See the +# ciphers(1) man page from the openssl package for list of all available +# options. +# The value "SSLCipherSuite" has been set via UCR variable "apache2/ssl/ciphersuite" +@!@ +if configRegistry.get('apache2/ssl/ciphersuite'): + print 'SSLCipherSuite %s' % configRegistry.get('apache2/ssl/ciphersuite') +@!@ + +# SSLHonorCipherOrder +# Option to prefer the server's cipher preference order +# When choosing a cipher during an SSLv3 or TLSv1 handshake, normally the +# client's preference is used. If this directive is enabled, +# the server's preference will be used instead. +# Default: SSLHonorCipherOrder off +# The value "SSLHonorCipherOrder" has been set via UCR variable "apache2/ssl/honorcipherorder" +@!@ +if configRegistry.get('apache2/ssl/honorcipherorder'): + print 'SSLHonorCipherOrder %s' % configRegistry.get('apache2/ssl/honorcipherorder') +@!@ + +# SSLCompression +# This directive allows to enable compression on the SSL level. +# Default: SSLCompression off +# Warning: Enabling compression causes security issues in most setups (the so called CRIME attack). +# The value "SSLCompression" has been set via UCR variable "apache2/ssl/compression" +@!@ +if configRegistry.get('apache2/ssl/compression'): + print 'SSLCompression %s' % configRegistry.get('apache2/ssl/compression') +@!@ +