Re: update-crypto-policies & Apache

Hi Jeff, Don't know if you ran across this, but maybe it will be some assistance, https://www.digicert.com/kb/ssl-support/ssl-enabling-perfect-forward-secr... Hope you are doing well. Brian On 2/2/21 6:33 PM, Jeffrey Ross via users wrote: > System is Fedora 33 I'm attempting to enable Perfect Forwarding > Secrecy (PFS) in Apache. > > I started by setting the options I wanted in Apache only to find that > the SSL options for Ciphers are ignored in the Apache configuration > and instead are pulled from /etc/crypto-policies/back-ends directory. > > I was able to disallow any TLS protocol below 1.2 in > opensslcnf.config, but not sure what I need to enable PFS. > > Suggestions would be appreciated. > > Thanks Jeff > _______________________________________________ > users mailing list -- users(a)lists.fedoraproject.org > To unsubscribe send an email to users-leave(a)lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org