diff --git a/apache2-ssl-global.conf b/apache2-ssl-global.conf index 48d8e05..e739a5a 100644 --- a/apache2-ssl-global.conf +++ b/apache2-ssl-global.conf @@ -95,7 +95,12 @@ # See the mod_ssl documentation for a complete list. # The magic string "DEFAULT_SUSE" expands to an openssl defined # secure list of default ciphers (openssl ciphers -v DEFAULT_SUSE). - SSLCipherSuite DEFAULT_SUSE + SSLCipherSuite PROFILE=SYSTEM + + # SSL Cipher Suite for Proxy Connections: + # Equivalent to SSLCipherSuite, but for the proxy connection. Please + # refer to SSLCipherSuite for additional information. + SSLProxyCipherSuite PROFILE=SYSTEM # SSLHonorCipherOrder # If SSLHonorCipherOrder is disabled, then the client's preferences diff --git a/apache2.changes b/apache2.changes index 35d1a70..a19efae 100644 --- a/apache2.changes +++ b/apache2.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Thu Jan 27 13:57:47 UTC 2022 - pgajdos@suse.com + +- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of + DEFAULT_SUSE [jsc#SLE-22561] +- set also SSLProxyCipherSuite to PROFILE=SYSTEM +- modified sources + % apache2-ssl-global.conf + ------------------------------------------------------------------- Tue Jan 11 12:05:55 UTC 2022 - David Anes