| Line 12... |
Line 12... |
| 12 |
server.errorfile-prefix = "/var/www/html/errors/error-"
|
12 |
server.errorfile-prefix = "/var/www/html/errors/error-"
|
| 13 |
|
13 |
|
| 14 |
$SERVER["socket"] == "alcasar.localdomain:443" {
|
14 |
$SERVER["socket"] == "alcasar.localdomain:443" {
|
| 15 |
ssl.engine = "enable"
|
15 |
ssl.engine = "enable"
|
| 16 |
ssl.pemfile = "/etc/pki/tls/private/alcasar.pem"
|
16 |
ssl.pemfile = "/etc/pki/tls/private/alcasar.pem"
|
| - |
|
17 |
ssl.ca-file = "/etc/pki/tls/certs/server-chain.crt"
|
| 17 |
ssl.use-sslv2 = "disable"
|
18 |
ssl.use-sslv2 = "disable"
|
| 18 |
ssl.use-sslv3 = "disable"
|
19 |
ssl.use-sslv3 = "disable"
|
| 19 |
ssl.use-compression = "disable"
|
20 |
ssl.use-compression = "disable"
|
| 20 |
ssl.honor-cipher-order = "enable"
|
21 |
ssl.honor-cipher-order = "enable"
|
| 21 |
ssl.cipher-list = "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS"
|
22 |
ssl.cipher-list = "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS"
|