blob: 011930d64e03b9a32e23048cdb43732ef2ea0b01 (
plain)
1
2
3
4
5
6
7
8
9
|
# explicit list of cipher suites
# (from ssl-config.mozilla.org)
SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384
# use server priorities for cipher algorithm choice
SSLHonorCipherOrder on
# protocols to enable (TLS 1.2 and 1.3 only)
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
|
