Commit 0d247f32 authored by Adam Lewenberg's avatar Adam Lewenberg
Browse files

explicitly disable some NULL suites 

disable the suites that do NULL encryption or NULL authentication
parent 1efa5c21

files/etc/apache2/conf.d/ssl-strength

+1 −1
Original line number Diff line number Diff line
@@ -5,4 +5,4 @@ 
# weak encryption protocols.



SSLProtocol all -SSLv2

SSLCipherSuite HIGH:MEDIUM:!ADH:!SSLv2:@STRENGTH
 
SSLCipherSuite !eNULL:!aNULL:HIGH:MEDIUM:!ADH:!SSLv2:@STRENGTH