gitea
/
Koha-clms
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bug 34193: SSLProtocol enable in use versions and disable deprecated versions 

This patch changes the default SSLProtocol for the Let's Encrypt
HTTPS template, so that it enables in use versions of TLS while
disabling the deprecated versions of TLS.

Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
(cherry picked from commit 58893f4c0b)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
(cherry picked from commit 79be336eee)
Signed-off-by: Pedro Amorim <pedro.amorim@ptfs-europe.com>
This commit is contained in:
David Cook 2023-07-03 23:52:53 +00:00 committed by Pedro Amorim
parent 9184e2e734
commit 9ed11360d6
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
debian/templates/apache-site-https.conf.in vendored
View File

@ -12,7 +12,7 @@
# OPAC
<VirtualHost *:80> #https
# SSLEngine on
# SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
# SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
# SSLCompression off
# SSLHonorCipherOrder on
# SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-SA-
@ -39,7 +39,7 @@
# Intranet
<VirtualHost *:80> #https
# SSLEngine on
# SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
# SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
# SSLCompression off
# SSLHonorCipherOrder on
# SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES