Created
September 5, 2018 18:07
-
-
Save nbeguier/6c6f1568f6d6c237eb6ffa5631c5fb42 to your computer and use it in GitHub Desktop.
Apache : BEAST & RC4
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # BEAST protection | |
| ## Remove TLSv1.0 | |
| SSLProtocol all -TLSv1 -SSLv3 -SSLv2 | |
| # BEAST protection, NO RC4 protection | |
| ## Allow TLSv1.0 and force RC4 | |
| SSLProtocol all -SSLv3 -SSLv2 | |
| SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !SEED RC4" | |
| # NO BEAST protection, RC4 protection | |
| ## Allow TLSv1.0 and remove RC4 from bulk ciphers | |
| SSLProtocol all -SSLv3 -SSLv2 | |
| SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !SEED!RC4" |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment