rpms/httpd
7
0
Fork 0
Code Issues Pull Requests Releases Activity

- update default SSLCipherSuite per upstream trunk

Browse Source
This commit is contained in:
Joe Orton 2011-01-08 08:41:29 +00:00
parent 9bdb50ef47
commit 0e9583d159
2 changed files with 13 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
httpd.spec
View File

@ -7,7 +7,7 @@
Summary: Apache HTTP Server Summary: Apache HTTP Server
Name: httpd Name: httpd
Version: 2.2.17 Version: 2.2.17
Release: 5%{?dist} Release: 6%{?dist}
URL: http://httpd.apache.org/ URL: http://httpd.apache.org/
Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 Source0: http://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2
Source1: index.html Source1: index.html
@ -486,6 +486,9 @@ rm -rf $RPM_BUILD_ROOT
%{_libdir}/httpd/build/*.sh %{_libdir}/httpd/build/*.sh
%changelog %changelog
* Sat Jan 8 2011 Joe Orton <jorton@redhat.com> - 2.2.17-6
- update default SSLCipherSuite per upstream trunk
* Wed Jan 5 2011 Joe Orton <jorton@redhat.com> - 2.2.17-5 * Wed Jan 5 2011 Joe Orton <jorton@redhat.com> - 2.2.17-5
- fix requires (#667397) - fix requires (#667397)

12
ssl.conf
View File

@ -94,9 +94,15 @@ SSLEngine on
SSLProtocol all -SSLv2 SSLProtocol all -SSLv2
# SSL Cipher Suite: # SSL Cipher Suite:
# List the ciphers that the client is permitted to negotiate. # List the ciphers that the client is permitted to negotiate.
# See the mod_ssl documentation for a complete list. # See the mod_ssl documentation for a complete list.
SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW SSLCipherSuite RC4-SHA:AES128-SHA:ALL:!ADH:!EXP:!LOW:!MD5:!SSLV2:!NULL
# SSL Cipher Honor Order:
# On a busy HTTPS server you may want to enable this directive
# to force clients to use one of the faster ciphers like RC4-SHA
# or AES128-SHA in the order defined by SSLCipherSuite.
#SSLHonorCipherOrder on
# Server Certificate: # Server Certificate:
# Point SSLCertificateFile at a PEM encoded certificate. If # Point SSLCertificateFile at a PEM encoded certificate. If