22 lines
891 B
Plaintext
22 lines
891 B
Plaintext
Listen 443
|
|
|
|
AddType application/x-x509-ca-cert .crt
|
|
AddType application/x-pkcs7-crl .crl
|
|
|
|
SSLCipherSuite TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5
|
|
SSLProxyCipherSuite TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5
|
|
SSLHonorCipherOrder on
|
|
|
|
SSLProtocol all -SSLv2 -SSLv3
|
|
SSLProxyProtocol all -SSLv2 -SSLv3
|
|
SSLPassPhraseDialog builtin
|
|
|
|
SSLSessionCache "shmcb:/usr/local/apache/logs/ssl_scache(512000)"
|
|
SSLSessionCacheTimeout 300
|
|
|
|
Mutex sysvsem default
|
|
|
|
SSLStrictSNIVHostCheck on
|
|
|
|
H2ModernTLSOnly off
|