Commit 83f52ae9 authored by Lonlone Lee's avatar Lonlone Lee
Browse files

Added disable_TLS11RC4 variable and the settings involved with disabling... 

Added disable_TLS11RC4 variable and the settings involved with disabling TLSv1, TLSv1.1 and RC4 from SSL settings
parent 61ed7a9e

templates/etc/apache2/conf.d/ssl-strength.erb

+5 −0
Original line number Diff line number Diff line
@@ -9,6 +9,11 @@ 
    RC4   = '!RC4:'

-%>

#

<%

  elsif (@disable_TLS11RC4) then

    TLS10 = ' -TLSv1 -TLSv1.1 '

    RC4   = '!RC4:'

-%>

# Disabling TLS1.0 and RC4 due to issues with RC4 and the BEAST attack.

<%

  else