Re: SSL Cipher configuration issue

[Paul Claridge <paul@xxxxxxxxxxxx>]

JFI

The important ssl.conf options I ended up with (ie no weak ciphers)... 
as of 27Aug21

SSLCipherSuite 
DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:!ECDHE-RSA-AES128-SHA256:!ECDHE-RSA-AES128-SHA256

SSLHonorCipherOrder on

SSLProtocol +TLSv1.2 +TLSv1.3

Enjoy

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx