libretic/ansible-role-apache
6
0
Fork 0
mirror of https://github.com/geerlingguy/ansible-role-apache synced 2024-12-22 19:10:19 +01:00
Code Issues Projects Releases Packages Wiki Activity

Disable SSLHonorCipherOrder

Browse source 
It's recommended by https://ssl-config.mozilla.org/#server=apache&version=2.4.41&config=modern&openssl=1.1.1k&guideline=5.7 to disable SSLHonorCipherOrder.
This commit is contained in:
mueller-ma 2024-01-19 14:09:42 +01:00 committed by GitHub
parent 71bace22fe
commit 623b383a99
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
templates/vhosts.conf.j2
View file

@ -48,7 +48,7 @@
SSLEngine on SSLEngine on
SSLCipherSuite {{ apache_ssl_cipher_suite }} SSLCipherSuite {{ apache_ssl_cipher_suite }}
SSLProtocol {{ apache_ssl_protocol }} SSLProtocol {{ apache_ssl_protocol }}
SSLHonorCipherOrder On SSLHonorCipherOrder off
{% if apache_vhosts_version == "2.4" %} {% if apache_vhosts_version == "2.4" %}
SSLCompression off SSLCompression off
{% endif %} {% endif %}