Posts

Showing posts with the label webmin

How to Enable Forward Secrecy in Webmin

It's pretty easy to enable Forward Secrecy in Webmin, here is the instruction. First, navigate to "Servers"-->"Apache Webserver", click the virtual server with SSL enabled which you want to edit. Then click "Edit Directives" to edit configuration file manually. Second, add the following configs to the bottom of the file, if it were exist, replace them. SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4" Click "Save and close" and restart Apache by clicking the "Apply Changes" on the top right. It's done and now Forward Secrecy has been enabled. You can run a ssl test here to find if it was enabled.