- More secure SSL Cipher Suite

- SSL virtual hosting fixes
- rel 12

Changed files:
    apache-mod_ssl-vhost.conf -> 1.19
    apache-mod_ssl.conf -> 1.19
    apache.spec -> 1.590

diff --git a/apache-mod_ssl-vhost.conf b/apache-mod_ssl-vhost.conf
index 3d2c83f5eeb56e0a61482a5d5d835b2dce3b551e..1cef405e7aa8cb613de0856d6c7338568e43d9d6 100644 (file)
--- a/apache-mod_ssl-vhost.conf
+++ b/apache-mod_ssl-vhost.conf
@@ -64,7 +64,8 @@ SSLMutex  file:/var/run/httpd/ssl_mutex
 ## SSL Virtual Host Context
 ##
 
-<VirtualHost _default_:443>
+NameVirtualHost *:443
+<VirtualHost *:443>
 #   SSL Engine Switch:
 #   Enable/Disable SSL for this virtual host.
 SSLEngine on
@@ -72,7 +73,7 @@ SSLEngine on
 #   SSL Cipher Suite:
 #   List the ciphers that the client is permitted to negotiate.
 #   See the mod_ssl documentation for a complete list.
-SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
+SSLCipherSuite ALL:!ADH:!EXP:!LOW:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+eNULL
 
 #   Server Certificate:
 #   Point SSLCertificateFile at a PEM encoded certificate.  If

diff --git a/apache-mod_ssl.conf b/apache-mod_ssl.conf
index 3d2c83f5eeb56e0a61482a5d5d835b2dce3b551e..1cef405e7aa8cb613de0856d6c7338568e43d9d6 100644 (file)
--- a/apache-mod_ssl.conf
+++ b/apache-mod_ssl.conf
@@ -64,7 +64,8 @@ SSLMutex  file:/var/run/httpd/ssl_mutex
 ## SSL Virtual Host Context
 ##
 
-<VirtualHost _default_:443>
+NameVirtualHost *:443
+<VirtualHost *:443>
 #   SSL Engine Switch:
 #   Enable/Disable SSL for this virtual host.
 SSLEngine on
@@ -72,7 +73,7 @@ SSLEngine on
 #   SSL Cipher Suite:
 #   List the ciphers that the client is permitted to negotiate.
 #   See the mod_ssl documentation for a complete list.
-SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
+SSLCipherSuite ALL:!ADH:!EXP:!LOW:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+eNULL
 
 #   Server Certificate:
 #   Point SSLCertificateFile at a PEM encoded certificate.  If

diff --git a/apache.spec b/apache.spec
index ace279b985e03b85dc8cb5659a2b95f2b9a5b7a9..54c91ccec775fb6446bc07e103db6f3305405ab6 100644 (file)
--- a/apache.spec
+++ b/apache.spec
@@ -41,7 +41,7 @@ Summary(ru.UTF-8):    Самый популярный веб-сервер
 Summary(tr.UTF-8):     Lider WWW tarayıcı
 Name:          apache
 Version:       2.2.14
-Release:       11
+Release:       12
 License:       Apache v2.0
 Group:         Networking/Daemons/HTTP
 Source0:       http://www.apache.org/dist/httpd/httpd-%{version}.tar.gz