Commit 1ab451ef authored by Lonlone Lee's avatar Lonlone Lee
Browse files

Reverting comment changes

parent 2adc7603

templates/etc/apache2/conf.d/ssl-strength.erb

+3 −2
Original line number Diff line number Diff line
@@ -3,11 +3,13 @@ 
# Disable SSLv2 and weak SSL ciphers.  Nessus scans warn if these are

# enabled and we don't want users to negotiate DES encryption or other

# weak encryption protocols.

#<%

<%

  if (@disable_TLS10RC4) then

    TLS10 = ' -TLSv1'

    RC4   = '!RC4:'

-%>

#

# Disabling TLS and RC4 due to issues with RC4 and the BEAST attack.

<%

  elsif (@disable_TLS11RC4) then

    TLS10 = ' -TLSv1 -TLSv1.1 '
@@ -23,7 +25,6 @@ 
  if (@disable_3DES) then

    DES3 = '!3DES:'

-%>

# Disabling TLS and RC4 due to issues with RC4 and the BEAST attack.

#

# Disabling DES and 3DES (aka Triple DES).

# See also https://www.openssl.org/blog/blog/2016/08/24/sweet32/