Rozdíly

Zde můžete vidět rozdíly mezi vybranou verzí a aktuální verzí dané stránky.

--- httpd-secure [2015/09/26 15:57] – upraveno mimo DokuWiki 127.0.0.1
+++ httpd-secure [2016/12/16 14:01] – [Konfigurace SSL VirtualHost HTTPD Apache 2.4] blazek
@@ Řádek 15: / Řádek 15: @@
   # Prefer PFS, allow TLS, avoid SSL, for IE8 on XP still allow 3DES
   SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+AESGCM EECDH EDH+AESGCM EDH+aRSA HIGH !MEDIUM !LOW !aNULL !eNULL !LOW !RC4 !MD5 !EXP !PSK !SRP !DSS"
-  # Prevent CRIME/BREACH compression attacks
+  SSLCompression Off
-  SSLCompression Off
+  Header always set Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
-  # Commit to HTTPS only traffic for at least 180 days
+  # Header always set X-Frame-Options SAMEORIGIN
-  Header add Strict-Transport-Security "max-age=15552000"
+  Header always set X-Frame-Options DENY
   SSLCertificateFile /etc/pki/tls/certs/example.com.crt
   SSLCertificateKeyFile /etc/pki/tls/private/example.com.key