linux_wiki:apache_http_server

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
linux_wiki:apache_http_server [2018/03/23 16:04]
billdozor [SSL Verification]
linux_wiki:apache_http_server [2018/03/23 16:10]
billdozor [SSL Verification]
Line 163: Line 163:
 </code> </code>
  
-==== SSL Verification ==== 
  
-Check what ciphers will be used given an Apache config +----
-<code bash> +
-openssl ciphers -v 'HIGH:!DHE:!EDH:!RC4:!ADH:!MEDIUM' +
-</code>+
  
-Verify server offered ciphers +===== Other Security Settings =====
-<code bash> +
-sslscan --no-failed 10.1.2.3:443 +
-</code> +
-  * Look for "Supported Server Cipher(s)" and "Preferred Server Cipher(s)"+
  
-----+Other important security settings.
  
 ==== Redirect HTTP to HTTPS ==== ==== Redirect HTTP to HTTPS ====
  • linux_wiki/apache_http_server.txt
  • Last modified: 2019/05/25 23:50
  • (external edit)