Merge pull request #10231 from zimbatm/apache-intermediate-ssl

apache-httpd: adopt mozilla's SSL configuration recommendation
2016-02-20 19:14:51 +00:00 · 2016-02-20 19:14:51 +00:00 · a7715e3e06
parent 78c99d8f4e f5f039eeb4
commit a7715e3e06
1 changed files with 2 additions and 1 deletions
--- a/nixos/modules/services/web-servers/apache-httpd/default.nix
+++ b/nixos/modules/services/web-servers/apache-httpd/default.nix
@ -173,7 +173,8 @@ let
    SSLRandomSeed connect builtin

    SSLProtocol All -SSLv2 -SSLv3
-    SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!EXP
+    SSLCipherSuite HIGH:!aNULL:!MD5:!EXP
+    SSLHonorCipherOrder on
  '';