Monthly Archives: September 2018

SSL/TLS configuration updated


SSL configuration for this site was way behind the times so I decided to tune it up a notch. Results are not too shabby if I can say so myself 🙂

SSLabs Score

For the copy/paste inclined these are the magic incantations for the apache web server:

SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
SSLHonorCipherOrder On
Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
Header always set X-Frame-Options DENY
Header always set X-Content-Type-Options nosniff
SSLCompression off
SSLUseStapling on
SSLStaplingCache "shmcb:logs/stapling-cache-path(150000)"