From 24ec2141b1f15d3553b47fa3b2e299bd826be1fe Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Thu, 13 Feb 2014 12:11:32 +0000 Subject: [PATCH 1/1] Use the nginx cipher string for apache --- cookbooks/apache/templates/default/ssl.erb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb index a4ef88c4f..ac25cc4bc 100644 --- a/cookbooks/apache/templates/default/ssl.erb +++ b/cookbooks/apache/templates/default/ssl.erb @@ -1,7 +1,7 @@ # DO NOT EDIT - This file is being maintained by Chef SSLHonorCipherOrder On -SSLCipherSuite EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 +SSLCipherSuite aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5 SSLCertificateFile /etc/ssl/certs/<%= @certificate %>.pem SSLCertificateKeyFile /etc/ssl/private/<%= @certificate %>.key -- 2.43.2