From 5380629bdaf88eb87d3a259fdba02b0b62508b7c Mon Sep 17 00:00:00 2001 From: Peter Bieringer Date: Wed, 13 Nov 2024 22:37:53 +0100 Subject: [PATCH] extend doc for SSL protocol/ciphersuite --- DOCUMENTATION.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/DOCUMENTATION.md b/DOCUMENTATION.md index 596a5125..ee4c7ab1 100644 --- a/DOCUMENTATION.md +++ b/DOCUMENTATION.md @@ -703,6 +703,22 @@ authentication plugin that extracts the username from the certificate. Default: +##### protocol + +Accepted SSL protocol +Example for secure configuration: ALL -SSLv3 -TLSv1 -TLSv1.1 +Format: Apache SSLProtocol list (from "mod_ssl") + +Default: (system default) + +##### ciphersuite + +Accepted SSL ciphersuite +Example for secure configuration: DHE:ECDHE:-NULL:-SHA +Format: OpenSSL cipher list (see also "man openssl-ciphers") + +Default: (system-default) + #### encoding ##### request