Différences

Ci-dessous, les différences entre deux révisions de la page.

--- doc:httpd [2015/05/21 21:33] – [TLS] meilleure présentation bertrand.bonnefoy-claudet
+++ doc:httpd [2016/10/14 17:09] (Version actuelle) – [Exemple : Apache 2.4 sur Debian Jessie] david.sinquin
@@ Ligne 31: / Ligne 31: @@
     ...
     SSLEngine on
-    SSLCertificateFile      /path/to/ertificate
+    SSLCertificateFile      /path/to/certificate
     SSLCertificateChainFile /path/to/intermediate_certificate
     SSLCertificateKeyFile   /path/to/private/key
-    SSLCACertificateFile    /path/to/ca_cert
+    SSLCACertificateFile    /path/to/ca_certificate
     ...
 </VirtualHost>
@@ Ligne 42: / Ligne 42: @@
 <file apache /etc/apache2/conf-available/tls.conf>
-    # modern configuration : https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=apache-2.4.10&openssl=1.0.1k&hsts=yes&profile=modern
+# modern configuration : https://mozilla.github.io/server-side-tls/ssl-config-generator/?server=apache-2.4.10&openssl=1.0.1k&hsts=yes&profile=modern
-    SSLProtocol             all -SSLv3 -TLSv1
+SSLProtocol             all -SSLv3 -TLSv1
-    SSLCipherSuite          ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
+SSLCipherSuite          ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK
-    SSLHonorCipherOrder     on
+SSLHonorCipherOrder     on
-    SSLCompression          off
+SSLCompression          off
-    # HSTS (mod_headers is required) (15768000 seconds = 6 months)
+# HSTS (mod_headers is required) (15768000 seconds = 6 months)
-    Header always add Strict-Transport-Security "max-age=15768000"
+Header always add Strict-Transport-Security "max-age=15768000"
-    # OCSP Stapling, only in httpd 2.3.3 and later
+# OCSP Stapling, only in httpd 2.3.3 and later
-    SSLUseStapling          on
+SSLUseStapling          on
-    SSLStaplingResponderTimeout 5
+SSLStaplingResponderTimeout 5
-    SSLStaplingReturnResponderErrors off
+SSLStaplingReturnResponderErrors off
-    SSLStaplingCache        shmcb:/var/run/ocsp(128000)
+SSLStaplingCache        shmcb:/var/run/ocsp(128000)
 </file>
 Activer cette configuration séparée avec ''a2enconf''.