better ciphersuite options

ashrode · Apr 12, 2013 · 9573e3f · 9573e3f
1 parent fc71ddc
commit 9573e3f
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/configs/apache2/https-hsts.conf b/configs/apache2/https-hsts.conf
@@ -39,8 +39,8 @@ NameVirtualHost 1.2.3.4:443
  SSLCertificateFile /etc/apache2/ssl/www.example.com.crt
  SSLCertificateKeyFile /etc/apache2/ssl/www.example.com.key
 
- SSLProtocol all -SSLv2
- SSLCipherSuite HIGH:!aNULL:!SSLv2:!MD5:@STRENGTH
+ SSLProtocol -ALL +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2
+ SSLCipherSuite ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH
  SSLHonorCipherOrder on
  SSLCompression off