apache config is this:
Code: Select all
SSLEngine on
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 \
EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 \
DHE-RSA-AES128-SHA256 \
!RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS"
ssl lab results are "A" atm, so should be ok.
https is optional but very likely this will change in the future, but there is no concrete plan for that yet.
any suggestions?
aaah, surfing on springrts.com feels much better