starred/certbot-certbot
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-08-01 19:02:52 +02:00
Code Issues Packages Projects Releases Wiki Activity

Remove nonsensical Apache config directives

Browse Source 
- AcceptPathInfo Off was breaking things (fixes: #1274)
- Enabling DEFLATE compression for HTML and XML may make the site vulnerable to BREACH!
This commit is contained in:
Peter Eckersley
2015-11-06 12:42:13 -08:00
parent 1d0b9b5ad5
commit 291c5c7132
1 changed files with 0 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
letsencrypt-apache/letsencrypt_apache/options-ssl-apache.conf
-6
View File
@@ -8,12 +8,6 @@ SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA25
SSLHonorCipherOrder on SSLHonorCipherOrder on
SSLCompression off SSLCompression off
ServerSignature Off
AcceptPathInfo Off
AddOutputFilterByType DEFLATE text/html text/plain text/xml application/pdf
AddDefaultCharset UTF-8
SSLOptions +StrictRequire SSLOptions +StrictRequire
# Add vhost name to log entries: # Add vhost name to log entries: