SecurityInnovation/TeamMentor-PHP — Issue #22: Use Only Strong SSL Algorithms
Author: SergeTruth
Created: 2011-11-09 13:39:22+00:00
State: open

PR documentation says to include the following:
SSLProtocol -all +SSLv3 +TLSv1
SSLCipherSuite HIGH:!aNULL:!SSLv2:!MD5:@STRENGTH
SSLHonorCipherOrder on
Additionally, explicitly include "SSLInsecureRenegotiation off" incase of old versions of apache/mod_ssl