Apache Howto – Perfect SSL Security

I often get asked for the best way to ensure perfect A or A+ level of SSL security on Apache web servers. So to answer that particular question, here is how I go it.

Firstly, adding the following to /etc/apache/config-available/security.conf to ensure the SSL security across all virtual hosts:

<IfModule mod_ssl.c>

  SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH

  SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1

  SSLHonorCipherOrder On

  SSLCompression off

</IfModule>

Once you have added this to the config file, just restart apache and boom, security.

Peter

With more than 26 years of Information Security experience, 14 of them being the Chief Information Security Officer of FTSE 250 businesses, I have a wealth of experience in keeping organisations safe and secure. My day to day role is that of Cyber Security Adviser to a number of organisations and CISO's spread across the globe, helping them maintain an appropriate risk appetite and compliance level. My passion is ensuring my clients stay as safe and secure as they can be.

All Posts

Apache Howto – Perfect SSL Security

Peter

Find out how to

Win at Cyber Security

NAVIGATION

SOCIAL MEDIA

TWITTER FEED

Apache Howto – Perfect SSL Security

Peter

Find out how to​

Win at Cyber Security​

NAVIGATION

SOCIAL MEDIA

TWITTER FEED

Find out how to

Win at Cyber Security