Disable SSLHonorCipherOrder

It's recommended by https://ssl-config.mozilla.org/#server=apache&version=2.4.41&config=modern&openssl=1.1.1k&guideline=5.7 to disable SSLHonorCipherOrder.
geerlingguy · Jan 19, 2024 · 623b383 · 623b383
1 parent 71bace2
commit 623b383
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/vhosts.conf.j2 b/templates/vhosts.conf.j2
@@ -48,7 +48,7 @@
   SSLEngine on
   SSLCipherSuite {{ apache_ssl_cipher_suite }}
   SSLProtocol {{ apache_ssl_protocol }}
-  SSLHonorCipherOrder On
+  SSLHonorCipherOrder off
 {% if apache_vhosts_version == "2.4" %}
   SSLCompression off
 {% endif %}