2023-02-06 22:26:12 +01:00
|
|
|
# Ansible managed
|
|
|
|
|
|
2021-07-28 09:56:47 +02:00
|
|
|
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
|
|
|
|
|
SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256
|
|
|
|
|
SSLHonorCipherOrder off
|
|
|
|
|
SSLCompression off
|
|
|
|
|
SSLSessionTickets off
|
|
|
|
|
SSLUseStapling on
|
|
|
|
|
SSLStaplingResponderTimeout 5
|
|
|
|
|
SSLStaplingReturnResponderErrors off
|
|
|
|
|
SSLStaplingCache shmcb:/var/run/ocsp(32768)
|
2022-12-27 12:01:38 +01:00
|
|
|
SSLOpenSSLConfCmd DHParameters {{ dhparams_path }}
|
