|
@@ -1916,7 +1916,7 @@ Install Prosody.
|
1916
|
1916
|
#+BEGIN_SRC: bash
|
1917
|
1917
|
apt-get install prosody
|
1918
|
1918
|
cp -a /etc/prosody/conf.avail/example.com.cfg.lua /etc/prosody/conf.avail/xmpp.cfg.lua
|
1919
|
|
-emacs /etc/prosody/conf.avail/.cfg.lua
|
|
1919
|
+emacs /etc/prosody/conf.avail/xmpp.cfg.lua
|
1920
|
1920
|
#+END_SRC
|
1921
|
1921
|
|
1922
|
1922
|
Change the *VirtualHost* name to your domain name and remove the line below it.
|
|
@@ -2327,6 +2327,11 @@ The settings should look something like the following.
|
2327
|
2327
|
SSLCertificateFile /etc/ssl/certs/mydomainname.com.crt
|
2328
|
2328
|
SSLCertificateKeyFile /etc/ssl/private/mydomainname.com.key
|
2329
|
2329
|
|
|
2330
|
+ # Options based on bettercrypto.org
|
|
2331
|
+ SSLProtocol All -SSLv2 -SSLv3
|
|
2332
|
+ SSLHonorCipherOrder On
|
|
2333
|
+ SSLCompression off
|
|
2334
|
+ SSLCipherSuite EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
|
2330
|
2335
|
|
2331
|
2336
|
# SSL Engine Options:
|
2332
|
2337
|
# Set various options for the SSL engine.
|