view modules/apache/templates/mod/ssl.conf.erb @ 106:ef0926ee389a puppet-3.6

Lock down Apache headers for security, based on https://securityheaders.io/
author IBBoard <dev@ibboard.co.uk>
date Sat, 14 May 2016 17:10:10 +0100
parents 37675581a273
children 675c1cc61eaf
line wrap: on
line source

<IfModule mod_ssl.c>
  SSLRandomSeed startup builtin
  SSLRandomSeed startup file:/dev/urandom <%= @ssl_random_seed_bytes %>
  SSLRandomSeed connect builtin
  SSLRandomSeed connect file:/dev/urandom <%= @ssl_random_seed_bytes %>

  AddType application/x-x509-ca-cert .crt
  AddType application/x-pkcs7-crl    .crl

  SSLPassPhraseDialog <%= @ssl_pass_phrase_dialog %>
  SSLSessionCache "shmcb:<%= @session_cache %>"
  SSLSessionCacheTimeout 300
<% if @ssl_compression -%>
  SSLCompression On
<% end -%>
  <% if scope.function_versioncmp([@apache_version, '2.4']) >= 0 -%>
  Mutex <%= @ssl_mutex %>
  <% else -%>
  SSLMutex <%= @ssl_mutex %>
  <% end -%>
  SSLCryptoDevice builtin
  SSLHonorCipherOrder On
  SSLCipherSuite <%= @ssl_cipher %>
  SSLProtocol <%= @ssl_protocol.compact.join(' ') %>
<% if @ssl_options -%>
  SSLOptions <%= @ssl_options.compact.join(' ') %>
<% end -%>
</IfModule>