Commit 37efd9d7 authored by Lonlone Lee's avatar Lonlone Lee
Browse files

Updated comments based on what's disabled.

parent 83f52ae9

templates/etc/apache2/conf.d/ssl-strength.erb

+6 −1
Original line number Diff line number Diff line
@@ -5,16 +5,21 @@ 
# weak encryption protocols.

<%

  if (@disable_TLS10RC4) then

-%>

# Disabling TLS1.0 and RC4 due to issues with RC4 and the BEAST attack.

<%

    TLS10 = ' -TLSv1'

    RC4   = '!RC4:'

-%>

#

<%

  elsif (@disable_TLS11RC4) then

-%>

# Disabling TLS1.1 and RC4 due to issues with RC4 and the BEAST attack.

<%

    TLS10 = ' -TLSv1 -TLSv1.1 '

    RC4   = '!RC4:'

-%>

# Disabling TLS1.0 and RC4 due to issues with RC4 and the BEAST attack.

<%

  else

    TLS10 = ''