diff --git a/files/copr/fe/httpd/coprs.conf b/files/copr/fe/httpd/coprs.conf index ff3269c32c..242d2444dc 100644 --- a/files/copr/fe/httpd/coprs.conf +++ b/files/copr/fe/httpd/coprs.conf @@ -22,8 +22,8 @@ WSGISocketPrefix /var/run/wsgi SSLEngine on SSLProtocol all -SSLv2 - #optimeize on speed - SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5 + # Use secure TLSv1.1 and TLSv1.2 ciphers + SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:RC4-SHA:AES128-SHA:HIGH:!aNULL:!MD5 SSLHonorCipherOrder on Header add Strict-Transport-Security "max-age=15768000"