From 073e85fdd11885fb6e95de5f0f88acb8addc6373 Mon Sep 17 00:00:00 2001 From: zhuchengliang Date: Sun, 19 Jan 2020 23:44:03 +0800 Subject: [PATCH] add SSLCipherSuite --- httpd.spec | 8 +++++++- ssl.conf | 4 ++-- 2 files changed, 9 insertions(+), 3 deletions(-) diff --git a/httpd.spec b/httpd.spec index 1611622..93ae172 100644 --- a/httpd.spec +++ b/httpd.spec @@ -8,7 +8,7 @@ Name: httpd Summary: Apache HTTP Server Version: 2.4.34 -Release: 13 +Release: 14 License: ASL 2.0 URL: https://httpd.apache.org/ Source0: https://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2 @@ -535,6 +535,12 @@ exit $rv %{_rpmconfigdir}/macros.d/macros.httpd %changelog +* Sun Jan 19 2020 openEuler Buildteam - 2.4.34-14 +- Type:bugfix +- ID:NA +- SUG:NA +- DESC:add SSLCipherSuite + * Sat Jan 11 2020 openEuler Buildteam - 2.4.34-13 - Type:NA - ID:NA diff --git a/ssl.conf b/ssl.conf index 373b9e5..afc92d3 100644 --- a/ssl.conf +++ b/ssl.conf @@ -86,8 +86,8 @@ SSLHonorCipherOrder on # See the mod_ssl documentation for a complete list. # The OpenSSL system profile is configured by default. See # update-crypto-policies(8) for more details. -SSLCipherSuite PROFILE=SYSTEM -SSLProxyCipherSuite PROFILE=SYSTEM +SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SHA1:!RC4 +SSLProxyCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SHA1:!RC4 # Point SSLCertificateFile at a PEM encoded certificate. If # the certificate is encrypted, then you will be prompted for a -- Gitee