Improve SSL security on nixos.org
Eelco Dolstra committed
Mar 9, 2015 at 13:33 UTC
f771961f92bb1161e3638098c474379e6e0e2458
1 file changed
+2
nixos-org/webserver.nix
+2
@@ -133,6 +133,8 @@ in
133
SSLCertificateChainFile /root/ssl-secrets/startssl-class1.pem
134
SSLCACertificateFile /root/ssl-secrets/startssl-ca.pem
135
SSLProtocol All -SSLv2 -SSLv3
136
+ SSLCipherSuite HIGH:!aNULL:!MD5:!EXP
137
+ SSLHonorCipherOrder on
138
'';
139
extraSubservices =
140
[ { function = import <services/subversion>;