apache: remove weak protocols and ciphers (#1759)

Azure · Nov 23, 2023 · c30580c · c30580c
1 parent bf122a7
commit c30580c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/playbooks/ood.yml b/playbooks/ood.yml
@@ -180,6 +180,8 @@
       - SSLCertificateFile "/etc/ssl/{{ ondemand_fqdn }}/{{ ondemand_fqdn }}.crt"
       - SSLCertificateKeyFile "/etc/ssl/{{ ondemand_fqdn }}/{{ ondemand_fqdn }}.key"
       - "{{SSLCertificateChainFile | default(None)}}"
+      - SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+      - SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256
 
   - name: Copy logo
     copy: