Updating SSLCipherSuite according to duraconf

diff --git a/templates/site.erb b/templates/site.erb
index f2443f9588cbc883565886b805444b8231487490..a1a6a8a5cfc64c1a0819b3f24c6349e801789aab 100644 (file)
--- a/templates/site.erb
+++ b/templates/site.erb
@@ -63,7 +63,7 @@
    # SSL Configuration
    SSLEngine on
    SSLProtocol -ALL +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2
-   SSLCipherSuite ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH
+   SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH
    SSLHonorCipherOrder on
    SSLCompression off
    SSLCertificateFile    /etc/ssl/certs/<%= title %>.crt