Changeset 740 for server/fedora/config/etc

Timestamp:

May 2, 2008, 6:45:13 PM (17 years ago)

Author:

andersk

Message:

Update SSL configuration directives from Fedora's ssl.conf.  Notably,
disable SSLv2.

File:

• server/fedora/config/etc/httpd/conf/httpd.conf (modified) (2 diffs)

server/fedora/config/etc/httpd/conf/httpd.conf

@@ -304 +304 @@
 
     SSLPassPhraseDialog  builtin
-    SSLSessionCache dbm:/var/run/ssl_scache
+    SSLSessionCache shmcb:/var/cache/mod_ssl/scache(512000)
     SSLSessionCacheTimeout 28800
-    SSLMutex file:/var/run/ssl_mutex
-    SSLRandomSeed startup builtin
+    SSLMutex default
+    SSLRandomSeed startup file:/dev/urandom 256
     SSLRandomSeed connect builtin
+    SSLCryptoDevice builtin
     SSLCertificateFile /etc/pki/tls/certs/scripts.pem
     SSLCertificateKeyFile /etc/pki/tls/private/scripts.key
@@ -314 +315 @@
     SSLVerifyClient none
     SSLOptions +StdEnvVars
+    SSLProtocol all -SSLv2
+    SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
     <VirtualHost 18.181.0.50:443 18.181.0.50:444>
         ServerName scripts-cert.mit.edu