Forward Secrecy

Hi

Is this possible to be set on a more general level so you don’t have to edit each individual virtual servers within the httpd.conf file?
UPDATE : Found it in the httpd.conf file, just need to add it before the virtual servers :slight_smile:

Secondly, if you want an A+ on SSLLABS you need to add the following

SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1

SSLHonorCipherOrder On

SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS

Header always set Strict-Transport-Security “max-age=63072000; includeSubDomains; preload”

Header always set X-Frame-Options DENY

Header always set X-Content-Type-Options nosniff

Requires Apache >= 2.4

SSLCompression off

SSLUseStapling on

SSLStaplingCache “shmcb:logs/stapling-cache(150000)”

  • Tim