nixpkgs/nixos/modules/services/web-servers/apache-httpd
zimbatm f5f039eeb4 apache-httpd: harden default SSL cipher list
A couple of tweaks on the SSL cipher list.

Disabled RC4 which is now considered broken.
https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what

Enabled Forward Secrecy for modern browsers.
https://en.wikipedia.org/wiki/Forward_secrecy

Without the change, NixOS servers are capped at Grade B on
https://www.ssllabs.com/ssltest/index.html
2015-10-05 17:19:53 +01:00
..
default.nix apache-httpd: harden default SSL cipher list 2015-10-05 17:19:53 +01:00
limesurvey.nix add limesurvey package and nixos module 2015-02-07 23:18:51 +01:00
mediawiki.nix Mediawiki 1.23.9 2015-04-28 08:05:16 +00:00
mercurial.nix Merge remote-tracking branch 'origin/master' into staging 2014-07-07 13:16:26 +02:00
moodle.nix fixing indentation 2015-04-13 13:46:42 +02:00
owncloud.nix owncloud: don't store plaintext adminPassword in nix store 2015-03-16 22:42:22 +00:00
per-server-options.nix Apache servedFiles: fixed a typo in example 2015-04-28 08:05:15 +00:00
phabricator.nix Enabled access to binaries of needed tools, and worker daemons can be enabled for phabricator #3306 2014-09-03 15:46:59 +04:00
tomcat-connector.nix Fix lib functions taken from pkgs.lib instead of lib in nixos 2014-08-01 16:23:56 -04:00
trac.nix Remove use of obsolete flags 2014-04-29 10:13:21 +02:00
wordpress.nix wordpress: allow extending Wordpress's .htaccess file 2015-09-10 13:21:38 +02:00
zabbix.nix Rewrite ‘with pkgs.lib’ -> ‘with lib’ 2014-04-14 16:26:48 +02:00