Loading templates/etc/apache2/conf.d/ssl-strength.erb +3 −3 Original line number Diff line number Diff line Loading @@ -3,19 +3,19 @@ # Disable SSLv2 and weak SSL ciphers. Nessus scans warn if these are # enabled and we don't want users to negotiate DES encryption or other # weak encryption protocols. # <% if (@disable_TLS10RC4) then -%> <%# Disabling TLS1.0 and RC4 due to issues with RC4 and the BEAST attack. -%> # Disabling TLS1.0 and RC4 due to issues with RC4 and the BEAST attack. <% TLS10 = ' -TLSv1' RC4 = '!RC4:' -%> # <% elsif (@disable_TLS11RC4) then -%> <%# Disabling TLS1.1 and RC4 due to issues with RC4 and the BEAST attack. -%> # Disabling TLS1.1 and RC4 due to issues with RC4 and the BEAST attack. <% TLS10 = ' -TLSv1 -TLSv1.1 ' RC4 = '!RC4:' Loading Loading
templates/etc/apache2/conf.d/ssl-strength.erb +3 −3 Original line number Diff line number Diff line Loading @@ -3,19 +3,19 @@ # Disable SSLv2 and weak SSL ciphers. Nessus scans warn if these are # enabled and we don't want users to negotiate DES encryption or other # weak encryption protocols. # <% if (@disable_TLS10RC4) then -%> <%# Disabling TLS1.0 and RC4 due to issues with RC4 and the BEAST attack. -%> # Disabling TLS1.0 and RC4 due to issues with RC4 and the BEAST attack. <% TLS10 = ' -TLSv1' RC4 = '!RC4:' -%> # <% elsif (@disable_TLS11RC4) then -%> <%# Disabling TLS1.1 and RC4 due to issues with RC4 and the BEAST attack. -%> # Disabling TLS1.1 and RC4 due to issues with RC4 and the BEAST attack. <% TLS10 = ' -TLSv1 -TLSv1.1 ' RC4 = '!RC4:' Loading