Skip to content

Instantly share code, notes, and snippets.

@ties
Created May 14, 2014 15:00
Show Gist options
  • Save ties/51afdc9421de041dd5f8 to your computer and use it in GitHub Desktop.
Save ties/51afdc9421de041dd5f8 to your computer and use it in GitHub Desktop.
# SSL config snippet for apache
SSLProtocol -ALL +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2
SSLCipherSuite EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4
SSLHonorCipherOrder on
#SSLCipherSuite HIGH:MEDIUM
# HSTS
Header always set Strict-Transport-Security "max-age=15768000; includeSubDomains"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment