Fix CVE-2011-3389

79d801f0 · Romain Courteaud · 2e7a8274 · 79d801f0
Commit 79d801f0 authored Jan 30, 2012 by Romain Courteaud
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

slapos/recipe/apache_zope_backend/template/snippet.ssl.in slapos/recipe/apache_zope_backend/template/snippet.ssl.in +2 -1

No files found.
--- a/slapos/recipe/apache_zope_backend/template/snippet.ssl.in
+++ b/slapos/recipe/apache_zope_backend/template/snippet.ssl.in
@@ -6,6 +6,7 @@ SSLCertificateKeyFile %(key)s
 SSLRandomSeed startup builtin
 SSLRandomSeed connect builtin
 SSLProtocol -ALL +SSLv3 +TLSv1
-SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
+SSLHonorCipherOrder On
+SSLCipherSuite RC4-SHA:HIGH:!ADH
 SSLProxyEngine On