TLS_Ciphers
specifies which subset of
cipher suites is permissible for a connection when TLSv1.2 or earlier is
negotiated. The parameter format is the cipher list format documented in
OpenSSL manual for openssl ciphers
command. The
default value is DEFAULT:!EXPORT:!LOW
.
# Exclude cipher suites using RC4 too
TLS_Ciphers DEFAULT:!EXPORT:!LOW:!RC4
When SSL library
supports security levels, a level can be set for each configuration clause
together with cipher string. For more information about security levels,
see
Section 3.11.11. TLS_SecurityLevel
# System default level 2 is too strict for this module
TLS_Ciphers DEFAULT:!EXPORT:!LOW@SECLEVEL=1