Commit 2adc7603 authored by Lonlone Lee's avatar Lonlone Lee
Browse files

Reverting comment changes

parent 30604af1

templates/etc/apache2/conf.d/ssl-strength.erb

+2 −8
Original line number Diff line number Diff line
@@ -3,20 +3,13 @@ 
# Disable SSLv2 and weak SSL ciphers.  Nessus scans warn if these are

# enabled and we don't want users to negotiate DES encryption or other

# weak encryption protocols.

<%

#<%

  if (@disable_TLS10RC4) then

-%>

# Disabling TLS1.0 and RC4 due to issues with RC4 and the BEAST attack.

<%

    TLS10 = ' -TLSv1'

    RC4   = '!RC4:'

-%>

#

<%

  elsif (@disable_TLS11RC4) then

-%>

# Disabling TLS1.1 and RC4 due to issues with RC4 and the BEAST attack.

<%

    TLS10 = ' -TLSv1 -TLSv1.1 '

    RC4   = '!RC4:'

-%>
@@ -30,6 +23,7 @@ 
  if (@disable_3DES) then

    DES3 = '!3DES:'

-%>

# Disabling TLS and RC4 due to issues with RC4 and the BEAST attack.

#

# Disabling DES and 3DES (aka Triple DES).

# See also https://www.openssl.org/blog/blog/2016/08/24/sweet32/