Empfehlungen für Apache2: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
Zeile 1: Zeile 1:
=Vorschlag von Letsencrypt Juli 2021=
+
=Juli 2021=
==Beispiel==
+
=Beispiel=
 
DHE-RSA-AES256-SHA256
 
DHE-RSA-AES256-SHA256
  
Zeile 19: Zeile 19:
 
SSLEngine on
 
SSLEngine on
  
SSLProtocol             all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
+
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
  
SSLCipherSuite         ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-
+
SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256: ECDHE-RSA-AES128-GCM-SHA256: ECDHE-ECDSA-AES256-GCM-SHA384: ECDHE-RSA-AES256-GCM-SHA384: ECDHE-ECD POLY20: ECDHE-RSA-CHACHA1305-POLY20: DHE-RSA-AES1305-GCM-SHA128: DHE-RSA-AES256-GCM-SHA256  
GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:'''DHE-RSA-AES256-SHA256''':DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS
 
  
SSLHonorCipherOrder     on
+
SSLHonorCipherOrder off
 +
 
 +
SSLSessionTickets off
  
 
SSLCompression          off
 
SSLCompression          off
  
 
SSLOptions +StrictRequire
 
SSLOptions +StrictRequire
</pre>
 
  
 
=Quelle=
 
=Quelle=
 
*https://www.ssl.com/de/leiten/tls-Einhaltung-von-Standards/
 
*https://www.ssl.com/de/leiten/tls-Einhaltung-von-Standards/

Version vom 13. Juli 2021, 19:19 Uhr

Juli 2021

Beispiel

DHE-RSA-AES256-SHA256

Symmetrische Verschlüsselung AES256
Asymmetrische Verschlüsselung RSA
Hash Algorythmus SHA256
Diffie Helman DHE

SSLEngine on

SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1

SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256: ECDHE-RSA-AES128-GCM-SHA256: ECDHE-ECDSA-AES256-GCM-SHA384: ECDHE-RSA-AES256-GCM-SHA384: ECDHE-ECD POLY20: ECDHE-RSA-CHACHA1305-POLY20: DHE-RSA-AES1305-GCM-SHA128: DHE-RSA-AES256-GCM-SHA256

SSLHonorCipherOrder off

SSLSessionTickets off

SSLCompression off

SSLOptions +StrictRequire

Quelle