Only use secure SSL version.

Needed for PCI compliancy.

Only use secure SSL version.
Needed for PCI compliancy.
dd6ac77e · Romain Courteaud · 69a43776 · dd6ac77e
Commit dd6ac77e authored Jan 17, 2012 by Romain Courteaud
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

slapos/recipe/apache_zope_backend/template/apache.zope.conf.in ...s/recipe/apache_zope_backend/template/apache.zope.conf.in +2 -0

No files found.
--- a/slapos/recipe/apache_zope_backend/template/apache.zope.conf.in
+++ b/slapos/recipe/apache_zope_backend/template/apache.zope.conf.in
@@ -38,6 +38,8 @@ SSLCertificateFile %(certificate)s
 SSLCertificateKeyFile %(key)s
 SSLRandomSeed startup builtin
 SSLRandomSeed connect builtin
+SSLProtocol -ALL +SSLv3 +TLSv1
+SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM

 SSLProxyEngine On