Commit 375256f2 authored by Stefan Fritsch's avatar Stefan Fritsch
Browse files

Disable AECDH ciphers in example config by using !aNULL (which includes 

all ciphers without authentication.

PR: 51363
Submitted by: Rob Stradling <rob comodo com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1135234 13f79535-47bb-0310-9956-ffa450edef68
parent 861bd494

CHANGES

+3 −0
Original line number Diff line number Diff line
@@ -2,6 +2,9 @@ 


Changes with Apache 2.3.13



  *) mod_ssl: Disable AECDH ciphers in example config. PR 51363.

     [Rob Stradling <rob comodo com>]



  *) core: Introduce new function ap_get_conn_socket() to access the socket of

     a connection. [Stefan Fritsch]

docs/conf/extra/httpd-ssl.conf.in

+1 −1
Original line number Diff line number Diff line
@@ -48,7 +48,7 @@ Listen @@SSLPort@@ 
#   SSL Cipher Suite:

#   List the ciphers that the client is permitted to negotiate.

#   See the mod_ssl documentation for a complete list.

SSLCipherSuite RC4-SHA:AES128-SHA:ALL:!ADH:!EXP:!LOW:!MD5:!SSLV2:!NULL

SSLCipherSuite RC4-SHA:AES128-SHA:ALL:!aNULL:!EXP:!LOW:!MD5:!SSLV2:!NULL



#   SSL Cipher Honor Order:

#   On a busy HTTPS server you may want to enable this directive