#nav-small-js {display:none;}

Härten des https Protokolls (SSL Offload)

Security Snippets haproxy cert

Ziel: A Rating im SSL Server Test

global
  crt-base /etc/haproxy/ssl
  ssl-default-bind-ciphers kEECDH+aRSA+AES:kRSA+AES:+AES256:RC4-SHA:!kEDH:!LOW:!EXP:!MD5:!aNULL:!eNULL

frontend  my_haproxy01_SSL_OFFLOAD_https
  bind    *:443 ssl crt /etc/haproxy/ssl-cert-snakeoil.pem crt /etc/haproxy/ssl/ no-sslv3

Ähnliche Seiten