Disable compression on the SSL level (CRIME attack).

[packages/apache.git] / apache-mod_cache.conf

diff --git a/apache-mod_cache.conf b/apache-mod_cache.conf
index 14ebe11bb9208aea1baab620fb48b720b4cf77ed..9718fd6dd933d2055ba0734f61a884f1f3abae9b 100644 (file)
--- a/apache-mod_cache.conf
+++ b/apache-mod_cache.conf
@@ -5,17 +5,26 @@ LoadModule cache_module       modules/mod_cache.so
 #
 
 <IfModule mod_cache.c>
-       #LoadModule disk_cache_module modules/mod_disk_cache.so
        # If you want to use mod_disk_cache instead of mod_mem_cache,
-       # uncomment the line above and comment out the LoadModule line below.
+       # just swap the two loadmodule comments.
+#      LoadModule disk_cache_module modules/mod_disk_cache.so
+       LoadModule mem_cache_module modules/mod_mem_cache.so
+
+       # prevent apache from cacheing cookies
+       CacheIgnoreHeaders Set-Cookie
+
        <IfModule mod_disk_cache.c>
-               CacheRoot "/var/cache/apache"
+               CacheRoot "/var/cache/httpd"
                CacheEnable disk /
                CacheDirLevels 5
                CacheDirLength 3
-       </IfModule> 
 
-       LoadModule mem_cache_module modules/mod_mem_cache.so
+#              CacheDefaultExpire 3600
+#              CacheMinExpire 3600
+#              CacheMinFileSize 64
+#              CacheMaxFileSize 64000
+       </IfModule>
+
        <IfModule mod_mem_cache.c>
                CacheEnable mem /
                MCacheSize 4096