diff options
| author | Stefan Fritsch <sf@apache.org> | 2011-06-13 21:30:05 +0200 |
|---|---|---|
| committer | Stefan Fritsch <sf@apache.org> | 2011-06-13 21:30:05 +0200 |
| commit | 6572b94bc6cfb41463edd9dc9d6f85cf0f04aa57 (patch) | |
| tree | af1a9f43911b58c017ef93a0ac99d69677541533 /docs/manual/ssl | |
| parent | Disable AECDH ciphers in example config by using !aNULL (which includes (diff) | |
| download | apache2-6572b94bc6cfb41463edd9dc9d6f85cf0f04aa57.tar.xz apache2-6572b94bc6cfb41463edd9dc9d6f85cf0f04aa57.zip | |
AFAICS, we don't have a default cipher suite but depend on openssl's default.
Document the fact that this default depends on the openssl version.
Recommend !aNULL over !ADH, because the former also excludes !AECDH in openssl
1.0+
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1135241 13f79535-47bb-0310-9956-ffa450edef68
Diffstat (limited to 'docs/manual/ssl')
| -rw-r--r-- | docs/manual/ssl/ssl_howto.xml | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/docs/manual/ssl/ssl_howto.xml b/docs/manual/ssl/ssl_howto.xml index 6a214e231c..9c787f87a0 100644 --- a/docs/manual/ssl/ssl_howto.xml +++ b/docs/manual/ssl/ssl_howto.xml @@ -67,7 +67,7 @@ only?</title> <p>The following enables only the strongest ciphers:</p> <example><title>httpd.conf</title> SSLProtocol all -SSLv2<br /> - SSLCipherSuite HIGH:!ADH:!EXP:!MD5:!NULL<br /> + SSLCipherSuite HIGH:!aNULL:!EXP:!MD5:!NULL<br /> </example> <p>While with the following configuration you enable two ciphers @@ -75,7 +75,7 @@ only?</title> <example><title>httpd.conf</title> SSLProtocol all -SSLv2<br /> - SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!ADH:!EXP:!MD5:!NULL<br /> + SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!aNULL:!EXP:!MD5:!NULL<br /> SSLHonorCipherOrder on </example> @@ -96,12 +96,12 @@ URL?</title> This can be done as follows:</p> <example> # be liberal in general<br /> - SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL<br /> + SSLCipherSuite ALL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL<br /> <br /> <Location /strong/area><br /> # but https://hostname/strong/area/ and below<br /> # requires strong ciphers<br /> - SSLCipherSuite HIGH:!ADH:!EXP:!MD5:!NULL<br /> + SSLCipherSuite HIGH:!aNULL:!EXP:!MD5:!NULL<br /> </Location> </example> </section> |