alioth/nixpkgs
3
0
Fork 0
forked from mirrors/nixpkgs
Code Releases Activity

httpd: Disable insecure protocols/ciphers by default

Browse source 
This makes us resistant to FREAK and similar attacks.
This commit is contained in:
Eelco Dolstra 2015-03-09 14:09:43 +01:00
parent 7b2adc0039
commit 8cb3e3b864
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
nixos/modules/services/web-servers/apache-httpd/default.nix
View file

@ -171,6 +171,9 @@ let
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
SSLProtocol All -SSLv2 -SSLv3
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!EXP
'';