|
-
-
-
- <IfModule mod_ssl.c>
-
-
-
-
-
-
-
-
-
-
-
-
- SSLRandomSeed startup builtin
- SSLRandomSeed startup file:/dev/urandom 512
- SSLRandomSeed connect builtin
- SSLRandomSeed connect file:/dev/urandom 512
-
-
-
-
-
-
-
-
-
-
-
- AddType application/x-x509-ca-cert .crt
- AddType application/x-pkcs7-crl .crl
-
-
-
-
-
- SSLPassPhraseDialog exec:/usr/share/apache2/ask-for-passphrase
-
-
-
-
-
-
- SSLSessionCache shmcb:${APACHE_RUN_DIR}/ssl_scache(512000)
- SSLSessionCacheTimeout 300
-
-
-
-
-
-
-
-
-
-
-
-
-
-
- {
- SSLCipherSuite {{ salt['pillar.get']('apache:ssl:SSLCipherSuite', 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS') }}
-
-
-
-
-
-
-
-
- SSLHonorCipherOrder {{ salt['pillar.get']('apache:ssl:SSLHonorCipherOrder', 'On') }}
-
-
-
-
- SSLProtocol {{ salt['pillar.get']('apache:ssl:SSLProtocol', 'all -SSLv2 -SSLv3') }}
-
-
-
-
-
-
-
-
-
- {% set use_stapling = salt['pillar.get']('apache:ssl:SSLUseStapling', 'Off') -%}
- {% if use_stapling == 'On' -%}
-
-
-
-
-
- SSLUseStapling {{ use_stapling }}
- SSLStaplingResponderTimeout {{ salt['pillar.get']('apache:ssl:SSLStaplingResponderTimeout', '5') }}
- SSLStaplingReturnResponderErrors {{ salt['pillar.get']('apache:ssl:SSLStaplingReturnResponderErrors', 'Off') }}
- SSLStaplingCache {{ salt['pillar.get']('apache:ssl:SSLStaplingCache', 'shmcb:/var/run/ocsp(128000)') }}
- {%- endif %}
-
- {% set ssl_session_ticket = salt['pillar.get']('apache:ssl:SSLSessionTickets') -%}
- {% if ssl_session_ticket -%}
-
-
- SSLSessionTickets {{ ssl_session_ticket }}
- {%- endif %}
- </IfModule>
-
|