Apache Module mod_ssl

Paris Heng · 06-07-2009, 09:15 AM

Where to configure SSLProtocol and SSLCipherSuite in the httpd.conf?

It is anyway in the file or under this (inside the <IfModule ssl_module>?

Code:

# Secure (SSL/TLS) connections
Include conf/extra/httpd-ssl.conf
#
# Note: The following must must be present to support
#       starting without SSL on platforms with no /dev/random equivalent
#       but a statically compiled-in mod_ssl.
#
<IfModule ssl_module>
SSLRandomSeed startup builtin
SSLRandomSeed connect builtin
</IfModule>

AlucardZero · 06-07-2009, 10:35 AM

conf/extra/httpd-ssl.conf

Paris Heng · 06-07-2009, 11:05 AM

Quote:

Originally Posted by AlucardZero

conf/extra/httpd-ssl.conf

How about the variable of TraceEnable? Where to configure it?

AlucardZero · 06-07-2009, 05:28 PM

http://httpd.apache.org/docs/2.0/mod...ml#traceenable

Paris Heng · 06-07-2009, 06:25 PM

Quote:

Originally Posted by AlucardZero

conf/extra/httpd-ssl.conf

I have just configured this as below in httpd-ssl.conf,

Quote:

SSLCipherSuite MEDIUM:HIGH

but it seen did not work for me, the scanner still detect that it using low cipher keys, any advice on how to configure this (To disable low cipher key)? But why I saw some example in the internet, it tell that the configuration is done in httpd.conf instead of httpd-ssl.conf?
"http://www.modssl.org/docs/2.8/ssl_howto.html"

Paris Heng · 06-11-2009, 10:50 AM

solved