https://issues.apache.org/bugzilla/show_bug.cgi?id=50307

--- Comment #2 from Igor Galić <[email protected]> 2010-11-20 09:31:35 EST 
---
I generally use:

SSLProtocol TLSv1 SSLv3
SSLCipherSuite HIGH:!ADH:!MD5

And Paul Querna has suggested
(http://journal.paul.querna.org/articles/2010/07/10/overclocking-mod_ssl/)

SSLCipherSuite RC4-SHA:AES128-SHA:DEFAUT_STUFF_HERE
SSLHonorCipherOrder on

Which will work for 2.3+ and is reasonably fast and secure.
It is also the default in trunk:
https://svn.apache.org/repos/asf/httpd/httpd/trunk/docs/conf/extra/httpd-ssl.conf.in

It seems that in my weeding out of outdated information and un-facts, I've
overlooked the ssl_howto, thank you the pointer.

Here is a first attempt at it:
http://svn.apache.org/viewvc?view=revision&revision=1037224

-- 
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to