View | Details | Raw Unified | Return to bug 25948
Collapse All | Expand All

(-)a/debian/templates/apache-site-https.conf.in (-5 / +4 lines)
Lines 12-21 Link Here
12
# OPAC
12
# OPAC
13
<VirtualHost *:80> #https
13
<VirtualHost *:80> #https
14
#  SSLEngine on
14
#  SSLEngine on
15
#  SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
15
#  SSLProtocol -all +TLSv1.2 +TLSv1.1
16
#  SSLCompression off
16
#  SSLCompression off
17
#  SSLHonorCipherOrder on
17
#  SSLHonorCipherOrder on
18
#  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-SA-
18
#  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256"
19
#  SSLCertificateKeyFile   /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
19
#  SSLCertificateKeyFile   /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
20
#  SSLCertificateFile      /etc/letsencrypt/live/__OPACSERVER__/cert.pem
20
#  SSLCertificateFile      /etc/letsencrypt/live/__OPACSERVER__/cert.pem
21
#  SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
21
#  SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
Lines 39-48 Link Here
39
# Intranet
39
# Intranet
40
<VirtualHost *:80> #https
40
<VirtualHost *:80> #https
41
#  SSLEngine on
41
#  SSLEngine on
42
#  SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
42
#  SSLProtocol -all +TLSv1.2 +TLSv1.1
43
#  SSLCompression off
43
#  SSLCompression off
44
#  SSLHonorCipherOrder on
44
#  SSLHonorCipherOrder on
45
#  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES
45
#  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256"
46
#  SSLCertificateKeyFile   /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
46
#  SSLCertificateKeyFile   /etc/letsencrypt/live/__OPACSERVER__/privkey.pem
47
#  SSLCertificateFile      /etc/letsencrypt/live/__OPACSERVER__/cert.pem
47
#  SSLCertificateFile      /etc/letsencrypt/live/__OPACSERVER__/cert.pem
48
#  SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
48
#  SSLCertificateChainFile /etc/letsencrypt/live/__OPACSERVER__/chain.pem
49
- 

Return to bug 25948