Skip to content

Instantly share code, notes, and snippets.

@TobleMiner

TobleMiner/gist:d0b7049db531e631e4fd

Last active August 29, 2015 14:16
Show Gist options
  • Save TobleMiner/d0b7049db531e631e4fd to your computer and use it in GitHub Desktop.
Save TobleMiner/d0b7049db531e631e4fd to your computer and use it in GitHub Desktop.
Download ZIP
Apache SSLEngine config TLS only, !RC4, HSTS
Raw
gistfile1.txt
SSLEngine On
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA !RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"
SSLCertificateFile /etc/ssl/certs/certificate.crt
SSLCertificateKeyFile /etc/ssl/private/privatekey.key
SSLCertificateChainFile /etc/ssl/ca/itermediate-cert.pem
SSLCACertificateFile /etc/ssl/ca/ca.pem
Header always set Strict-Transport-Security “max-age=31556926; preload;″ #includeSubDomains
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment