copr-fe: Use secure TLSv1.1 and TLSv1.2 ciphers

This commit is contained in:
Till Maas 2014-09-21 13:57:52 +02:00
parent 48e13f74ea
commit ba2da3ed82

View file

@ -22,8 +22,8 @@ WSGISocketPrefix /var/run/wsgi
<VirtualHost *:443>
SSLEngine on
SSLProtocol all -SSLv2
#optimeize on speed
SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
# Use secure TLSv1.1 and TLSv1.2 ciphers
SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5
SSLHonorCipherOrder on
Header add Strict-Transport-Security "max-age=15768000"