Changes between Version 97 and Version 98 of NewLiveServer

Timestamp:

04/30/12 13:14:45 (5 years ago)

Author:

chris

Comment:

updated as per ticket:409

NewLiveServer

@@ -99 +99 @@
 === HTTPS ===
 
-The HTTPS !VirtualHosts have the following directives:
+The HTTPS !VirtualHosts have the following directives (see ticket:409):
 
 {{{
 SSLEngine on
-SSLCipherSuite HIGH
 SSLProtocol all -SSLv2
+SSLHonorCipherOrder On
+SSLCipherSuite RC4-SHA:HIGH:!ADH:!SSLv2:!aNULL
 SSLCertificateFile      /etc/ssl/transitionnetwork.org/transitionnetwork.org.pem
 SSLCertificateChainFile /etc/ssl/transitionnetwork.org/gandi.pem
@@ -116 +117 @@
 }}}
 
-And the gandi.pem contains the cert and the chain of root certificates:
-
-{{{
-wget http://crt.gandi.net/GandiStandardSSLCA.crt
-wget http://crt.usertrust.com/UTNAddTrustServer_CA.crt
-wget http://crt.usertrust.com/AddTrustExternalCARoot.crt
+And the gandi.pem contains the the chain of root certificates:
+
+{{{
+wget http://crt.gandi.net/GandiStandardSSLCA.crt -O GandiStandardSSLCA.crt
+wget http://crt.usertrust.com/UTNAddTrustServer_CA.crt -O UTNAddTrustServer_CA.crt
+wget http://crt.usertrust.com/AddTrustExternalCARoot.crt -O AddTrustExternalCARoot.crt
+
 openssl x509 -inform DER -in GandiStandardSSLCA.crt -out GandiStandardSSLCA.pem
 openssl x509 -inform DER -in AddTrustExternalCARoot.crt -out AddTrustExternalCARoot.pem
 openssl x509 -inform DER -in UTNAddTrustServer_CA.crt -out UTNAddTrustServer_CA.pem
-cat transitionnetwork.org.crt > gandi.pem
-cat GandiStandardSSLCA.pem >> gandi.pem
+
+cat GandiStandardSSLCA.pem > gandi.pem
+cat UTNAddTrustServer_CA.pem >> gandi.pem
 cat AddTrustExternalCARoot.pem >> gandi.pem
-cat UTNAddTrustServer_CA.pem >> gandi.pem
 }}}