X-Git-Url: http://git.pld-linux.org/?a=blobdiff_plain;f=apache-mod_ssl.conf;h=0867c277e6694efe9e62d85c6c585862091d4c1a;hb=4d51c0eb6be1d8258f1cdc0f3f7e6a2c637e5b39;hp=1cef405e7aa8cb613de0856d6c7338568e43d9d6;hpb=4add78044615bb8b98a96242b1e9a2d0133dec5b;p=packages%2Fapache.git

diff --git a/apache-mod_ssl.conf b/apache-mod_ssl.conf
index 1cef405..0867c27 100644
--- a/apache-mod_ssl.conf
+++ b/apache-mod_ssl.conf
@@ -70,10 +70,16 @@ NameVirtualHost *:443
 #   Enable/Disable SSL for this virtual host.
 SSLEngine on
 
+#   Usable SSL protocol flavors:
+#   This directive can be used to control the SSL protocol flavors mod_ssl
+#   should use when establishing its server environment. Clients then can only
+#   connect with one of the provided protocols.
+SSLProtocol all -SSLv2
+
 #   SSL Cipher Suite:
 #   List the ciphers that the client is permitted to negotiate.
 #   See the mod_ssl documentation for a complete list.
-SSLCipherSuite ALL:!ADH:!EXP:!LOW:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+eNULL
+SSLCipherSuite ALL:!ADH:!EXP:!LOW:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
 
 #   Server Certificate:
 #   Point SSLCertificateFile at a PEM encoded certificate.  If