summary refs log tree commit diff
path: root/nixos/modules/services
diff options
context:
space:
mode:
authorzimbatm <zimbatm@zimbatm.com>2016-02-20 19:14:51 +0000
committerzimbatm <zimbatm@zimbatm.com>2016-02-20 19:14:51 +0000
commita7715e3e067d549e16c13c2f5cdaa51c4d62162a (patch)
tree98cdade4f8254b3e0a74d92160a6f0656943e048 /nixos/modules/services
parent78c99d8f4ec326665c889e30355cc9c82b30733c (diff)
parentf5f039eeb4b3a707bed82b3abecd16779e7c2bf5 (diff)
downloadnixlib-a7715e3e067d549e16c13c2f5cdaa51c4d62162a.tar
nixlib-a7715e3e067d549e16c13c2f5cdaa51c4d62162a.tar.gz
nixlib-a7715e3e067d549e16c13c2f5cdaa51c4d62162a.tar.bz2
nixlib-a7715e3e067d549e16c13c2f5cdaa51c4d62162a.tar.lz
nixlib-a7715e3e067d549e16c13c2f5cdaa51c4d62162a.tar.xz
nixlib-a7715e3e067d549e16c13c2f5cdaa51c4d62162a.tar.zst
nixlib-a7715e3e067d549e16c13c2f5cdaa51c4d62162a.zip
Merge pull request #10231 from zimbatm/apache-intermediate-ssl
apache-httpd: adopt mozilla's SSL configuration recommendation
Diffstat (limited to 'nixos/modules/services')
-rw-r--r--nixos/modules/services/web-servers/apache-httpd/default.nix3
1 files changed, 2 insertions, 1 deletions
diff --git a/nixos/modules/services/web-servers/apache-httpd/default.nix b/nixos/modules/services/web-servers/apache-httpd/default.nix
index 739181d861b2..60ec49c9e66e 100644
--- a/nixos/modules/services/web-servers/apache-httpd/default.nix
+++ b/nixos/modules/services/web-servers/apache-httpd/default.nix
@@ -173,7 +173,8 @@ let
     SSLRandomSeed connect builtin
 
     SSLProtocol All -SSLv2 -SSLv3
-    SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!EXP
+    SSLCipherSuite HIGH:!aNULL:!MD5:!EXP
+    SSLHonorCipherOrder on
   '';