https://bz.apache.org/bugzilla/show_bug.cgi?id=69560

Michael Orlitzky <mich...@orlitzky.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |NEW

--- Comment #3 from Michael Orlitzky <mich...@orlitzky.com> ---
Hopefully unexciting:

<IfModule ssl_module>
  SSLRandomSeed startup builtin
  SSLRandomSeed startup file:/dev/urandom 512
  SSLRandomSeed connect builtin
  SSLRandomSeed connect file:/dev/urandom 512

  SSLSessionCache shmcb:/run/ssl_scache(512000)
  Mutex file:/run/apache_ssl_mutex ssl-cache

  SSLProtocol ALL -SSLv3
  SSLHonorCipherOrder On

  SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AE\
S:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!MD5:!EXPORT

  SSLOpenSSLConfCmd DHParameters "/etc/apache2/ssl/dh2048.pem"
</IfModule>

I am however using mod_md. Each vhost has,

  SSLEngine on
  MDomain www.example.com

and the module itself is configured with...

<IfModule md_module>
  # Don't ever try a DNS challenge.
  MDCAChallenges tls-alpn-01 http-01
  MDCertificateAgreement accepted

  MDMembers manual
  MDMatchNames servernames
  MDPrivateKeys secp256r1 rsa2048

  MDStapling on
  MDStapleOthers off

  MDStoreDir /etc/apache2/ssl/md
</IfModule>

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscr...@httpd.apache.org
For additional commands, e-mail: bugs-h...@httpd.apache.org

Reply via email to