Files where directives are defined do not matter at all, what matters is the "Context" in which they are placed, that is server config, virtualhost, directory, etc, If you look at the official docs all directives have a specific context in which they can be used.
On Thu, Mar 3, 2016 at 5:31 PM, schnappiwololo@xxxxxxxxx.INVALID <schnappiwololo@xxxxxxxxx.invalid> wrote:Apache options like "SSLProtocol", "SSLCipherSuite", and "HonorCipherOrder" among others can be put in both /etc/apache2/apache2.conf (Debian based) or etc/apache2/mods-available/ssl.conf (or even the virtual host configuration file).
Which location should these server wide SSL settings be optimally/conventionally placed (ssl.conf or apache2.conf)? Furthermore and more importantly if the settings conflict in these two files/ locations which setting/file takes precedence?
|