From: Silvio Rhatto <rhatto@riseup.net>
Date: Fri, 11 Oct 2013 19:02:38 +0000 (-0300)
Subject: Updating SSLCipherSuite according to duraconf
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=a2ffe846a3693aa68d0c744137f616edd54dac3d;p=puppet-apache.git

Updating SSLCipherSuite according to duraconf
---

diff --git a/templates/site.erb b/templates/site.erb
index f2443f9..a1a6a8a 100644
--- a/templates/site.erb
+++ b/templates/site.erb
@@ -63,7 +63,7 @@
    # SSL Configuration
    SSLEngine on
    SSLProtocol -ALL +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2
-   SSLCipherSuite ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH
+   SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH
    SSLHonorCipherOrder on
    SSLCompression off
    SSLCertificateFile    /etc/ssl/certs/<%= title %>.crt