From 26634a3d77a2db21c0c4bbc7520c897141995fc8ab94ac21e984e060542cc385 Mon Sep 17 00:00:00 2001 From: Petr Gajdos Date: Mon, 31 Jan 2022 10:50:24 +0000 Subject: [PATCH] Accepting request 949462 from home:pgajdos - ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of DEFAULT_SUSE [jsc#SLE-22561] - set also SSLProxyCipherSuite to PROFILE=SYSTEM - modified sources % apache2-ssl-global.conf OBS-URL: https://build.opensuse.org/request/show/949462 OBS-URL: https://build.opensuse.org/package/show/Apache/apache2?expand=0&rev=666 --- apache2-ssl-global.conf | 7 ++++++- apache2.changes | 9 +++++++++ 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/apache2-ssl-global.conf b/apache2-ssl-global.conf index 48d8e05..e739a5a 100644 --- a/apache2-ssl-global.conf +++ b/apache2-ssl-global.conf @@ -95,7 +95,12 @@ # See the mod_ssl documentation for a complete list. # The magic string "DEFAULT_SUSE" expands to an openssl defined # secure list of default ciphers (openssl ciphers -v DEFAULT_SUSE). - SSLCipherSuite DEFAULT_SUSE + SSLCipherSuite PROFILE=SYSTEM + + # SSL Cipher Suite for Proxy Connections: + # Equivalent to SSLCipherSuite, but for the proxy connection. Please + # refer to SSLCipherSuite for additional information. + SSLProxyCipherSuite PROFILE=SYSTEM # SSLHonorCipherOrder # If SSLHonorCipherOrder is disabled, then the client's preferences diff --git a/apache2.changes b/apache2.changes index 35d1a70..a19efae 100644 --- a/apache2.changes +++ b/apache2.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Thu Jan 27 13:57:47 UTC 2022 - pgajdos@suse.com + +- ssl-global.conf: set SSLCipherSuite to PROFILE=SYSTEM instead of + DEFAULT_SUSE [jsc#SLE-22561] +- set also SSLProxyCipherSuite to PROFILE=SYSTEM +- modified sources + % apache2-ssl-global.conf + ------------------------------------------------------------------- Tue Jan 11 12:05:55 UTC 2022 - David Anes