]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
Change the SSLCipherSuite default to a shorter, whitelist oriented
authorWilliam A. Rowe Jr <wrowe@apache.org>
Thu, 27 Jun 2013 00:10:15 +0000 (00:10 +0000)
committerWilliam A. Rowe Jr <wrowe@apache.org>
Thu, 27 Jun 2013 00:10:15 +0000 (00:10 +0000)
commitefacdd5e81ccbaacb3a2293ca732ba27f14c1b51
treef3541bcee2e8f016335c6a350786d6ea59448b07
parent7e2ea927e397ed0a0e8afd745f997e7ca3ee1186
Change the SSLCipherSuite default to a shorter, whitelist oriented
definition.

Disable AECDH ciphers in example config by using !aNULL (which includes
all ciphers without authentication.

PR: 51363
Submitted by: rjung, kbrand, Rob Stradling <rob comodo com>
Backports: r966160, r1135234, r1203752

Fix up some SSL configuration, per issue #49484. IE6 had a hotfix released
for this problem quite a while back (see kb 921090), so restrict the
modified behavior to the old/unsupported browsers.
* docs/conf/extra/http-ssl.conf.in:
  (): tighten up the regex to only select old MSIE browsers for the
    downgrade in http behavior. this allows IE6 to run much faster.
* Make the MSIE BrowserMatch regexp fit for MSIE 10. Remove useless '.*'

Backports: r966055, r1132793
Submitted by: gstein, sf

Reviewed by: wrowe, rjung, gsmith

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x@1497156 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
STATUS
docs/conf/ssl-std.conf.in
docs/manual/ssl/ssl_howto.html.en
docs/manual/ssl/ssl_howto.xml