1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs synced 2024-10-19 03:47:13 -04:00
nixpkgs/nixos/modules/services/web-servers/apache-httpd
zimbatm f5f039eeb4 apache-httpd: harden default SSL cipher list
A couple of tweaks on the SSL cipher list.

Disabled RC4 which is now considered broken.
https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what

Enabled Forward Secrecy for modern browsers.
https://en.wikipedia.org/wiki/Forward_secrecy

Without the change, NixOS servers are capped at Grade B on
https://www.ssllabs.com/ssltest/index.html
2015-10-05 17:19:53 +01:00
..
default.nix apache-httpd: harden default SSL cipher list 2015-10-05 17:19:53 +01:00
limesurvey.nix
mediawiki.nix
mercurial.nix
moodle.nix
owncloud.nix
per-server-options.nix
phabricator.nix
tomcat-connector.nix
trac.nix
wordpress.nix wordpress: allow extending Wordpress's .htaccess file 2015-09-10 13:21:38 +02:00
zabbix.nix