diff options
| author | Stefan Bühler <stbuehler@web.de> | 2011-12-18 12:58:08 +0000 |
|---|---|---|
| committer | Stefan Bühler <stbuehler@web.de> | 2011-12-18 12:58:08 +0000 |
| commit | d83b009d542550aec1f566fc861e16065467ef98 (patch) | |
| tree | 6218085e8f474bf6f1770a1a1698f6b7cfb012e8 /doc/config | |
| parent | 761bedd7fe956d83785a2b8f6abed6c0a0915109 (diff) | |
| download | lighttpd-git-d83b009d542550aec1f566fc861e16065467ef98.tar.gz | |
[doc] fix ssl config exaple for ssl.cipher-list
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2817 152afb58-edef-0310-8abb-c4023f1b3aa9
Diffstat (limited to 'doc/config')
| -rw-r--r-- | doc/config/lighttpd.conf | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/config/lighttpd.conf b/doc/config/lighttpd.conf index 98309544..47d67292 100644 --- a/doc/config/lighttpd.conf +++ b/doc/config/lighttpd.conf @@ -400,11 +400,11 @@ server.upload-dirs = ( "/var/tmp" ) ## # A stricter base cipher suite. For details see: ## # http://blog.ivanristic.com/2011/10/mitigating-the-beast-attack-on-tls.html ## # -## ssl.ciphers = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM" +## ssl.cipher-list = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM" ## # ## # Make the server prefer the order of the server side cipher suite instead of the client suite. ## # This is necessary to mitigate the BEAST attack (unless you disable all non RC4 algorithms). -## # This option is enabled by default, but only used if ssl.ciphers is set. +## # This option is enabled by default, but only used if ssl.cipher-list is set. ## # ## # ssl.honor-cipher-order = "enable" ## # |