| ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA'; | |
| ssl_prefer_server_ciphers on; | |
| ssl_protocols TLSv1.2 TLSv1.1; | |
| ssl_certificate /etc/pki/tls/certs/star_example.crt; | |
| ssl_certificate_key /etc/pki/tls/private/example_com_no_pass.key; | |
| ssl_dhparam /etc/pki/tls/certs/dhparams.pem; | |
| ssl_stapling on; | |
| ssl_stapling_verify on; | |
| resolver 8.8.4.4 8.8. |
Enterprise Linux installation of ODBC is easy.
yum install unixODBC unixODBC-devel freetds freetds-devel perl-DBD-ODBC perl-local-libConfiguration isn't much harder. You'll need to edit UnixODBC's driver list to add FreeTDS as an available driver.
| Listen 443 | |
| RewriteEngine on | |
| AddType application/x-x509-ca-cert .crt | |
| AddType application/x-pkcs7-crl .crl | |
| SSLPassPhraseDialog builtin | |
| SSLSessionCache "shmcb:/var/run/ssl_scache(512000)" | |
| SSLSessionCacheTimeout 300 |
| set fileformats=unix,dos,mac # used to have issues with ^M at every line ending | |
| set tabstop=4 | |
| set shiftwidth=4 | |
| set backspace=indent,eol,start # allow backspacing through lines | |
| set ruler | |
| set encoding=utf-8 | |
| syntax on |