ViaThinkSoft CodeLib

Mit der folgenden Konfiguration verschwinden einige Warnungen auf ssllabs.com (Stand: 19.03.2018):

<IfModule mod_ssl.c>
        SSLStaplingCache shmcb:/var/run/ssl_stapling(32768)

        SSLHonorCipherOrder on

        # DM 19.03.2018 deaktiviert aufgrund "WEAK"-Einstufung bei ssllabs.com:
        #              - TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c) => AES128-GCM-SHA256
        #              - TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c) => AES128-SHA256
        #              - TLS_RSA_WITH_AES_128_CBC_SHA    (0x2f) => AES128-SHA
        #              - TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d) => AES256-GCM-SHA384
        #              - TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d) => AES256-SHA256
        #              - TLS_RSA_WITH_AES_256_CBC_SHA    (0x35) => AES256-SHA
        # Auf https://wiki.mozilla.org/Security/Server_Side_TLS kann man die Apache-CipherSuit-Namen ablesen
        SSLCipherSuite HIGH:!aNULL:!eNULL:!kECDH:!aDH:!RC4:!3DES:!CAMELLIA:!MD5:!PSK:!SRP:!KRB5:@STRENGTH:!AES128-GCM-SHA256:!AES128-SHA256:!AES128-SHA:!AES256-GCM-SHA384:!AES256-SHA256:!AES256-SHA
</IfModule>