How to tune Apache configuration for SSL ciphers, banner, HTTP methods, auto complete?
Issue
How to tune general Apache configuration to:
- Select some SSL ciphers higher than 128 bits?
- Mask the web server banner?
- Deny arbitrary HTTP methods or select the HTTP methods GET or POST?
- Configure access only through domain name?
- Set auto complete to OFF?
- Set all the session cookie attributes?
- Seeking Technical docs for setting up SSL ciphers higher than 128 bits for an Apache HTTP server.
Environment
-
Red Hat Enterprise Linux (RHEL)
- 5.x
- 6.x
-
Apache 2.2.x
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.