Peter Müller a57f4a9f5d disable SSL compression and session tickets in Apache ...

Ensure that Apache never uses SSL compression, which is vulnerable,
and turn off session tickets since the might cause impact to PFS.

Based against next, supersedes first version.

Reported-by: Wolfgang Apolinarski <wolfgang.apolinarski@ipfire.org>
Signed-off-by: Peter Müller <peter.mueller@link38.eu>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

2017-11-20 15:45:52 +00:00

..

conf.d

Typo in compilation commands of postfix.

2007-11-01 14:18:27 +00:00

vhosts.d

disable SSL compression and session tickets in Apache

2017-11-20 15:45:52 +00:00

default-server.conf

Nagios addon install.sh with vhost Port 1007 added

2009-03-14 14:00:46 +01:00

global.conf

Fix potential HTTPoxy vulnerability

2016-07-19 15:02:16 +01:00

httpd.conf

Update to apache 2.4.27

2017-09-04 12:40:20 +01:00

listen.conf

Hinzugefuegt:

2006-09-18 19:05:20 +00:00

loadmodule.conf

Update to apache 2.4.27

2017-09-04 12:40:20 +01:00

mod_log_config.conf

Hinzugefuegt:

2006-09-18 19:05:20 +00:00

server-tuning.conf

Update to apache 2.4.27

2017-09-04 12:40:20 +01:00

ssl-global.conf

Update to apache 2.4.27

2017-09-04 12:40:20 +01:00

uid.conf

Hinzugefuegt:

2006-09-18 19:05:20 +00:00