My SSL test result was an A- due to forward secrecy.
I want to know how to implement the fix mentioned on this page here: https://blog.qualys.com/ssllabs/2013/06/25/ssl-labs-deploying-forward-secrecy
Specifically the lines:
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA
apache2.conf file I have an
SSLProtocol line and then below that I can place the
SSLCipherSuite line, that's where I assume these forward secrecy fix lines are supposed to go.
For example from this question here:
I see their SSLCipherSuite line as:
Looking at the Apache SSL doc I see the pattern above.
I just don't know how to put three lines, are they separated by commmas, or use three separate lines, or do those lines go somewhere else?