Apache HTTPS 拿 A+

Header always set Strict-Transport-Security "max-age=15768000"

SSLProtocol All -SSLv2 -SSLv3 -TLSv1

SSLHonorCipherOrder on

SSLCipherSUite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH EDH+aRSA !CAMELLIA !SEED !3DES !RC4 !aNULL !eNULL !LOW !MD5 !EXP !PSK !SRP !DSS"

SSLProxyCipherSuite HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4:!3DES:!AES256-SHA:!AES128-SHA:!ECDHE-RSA-AES256-SHA384:!ECDHE-RSA-AES256-SHA:!DHE-RSA-AES256-SHA256:!DHE-RSA-AES256-SHA:!DHE-RSA-CAMELLIA256-SHA256:!DHE-RSA-CAMELLIA256-SHA:!AES256-SHA256:!CAMELLIA256-SHA256:!CAMELLIA256-SHA:!ECDHE-RSA-AES128-SHA256:!ECDHE-RSA-AES128-SHA:!DHE-RSA-AES128-SHA256:!DHE-RSA-AES128-SHA:!DHE-RSA-CAMELLIA128-SHA256:!DHE-RSA-CAMELLIA128-SHA:!AES128-SHA256:!CAMELLIA128-SHA256:!CAMELLIA128-SHA:!DHE-RSA-CHACHA20-POLY1305-OLD:!DHE-RSA-AES256-GCM-SHA384:!DHE-RSA-AES128-GCM-SHA256

SSLProxyProtocol all -SSLv3 -TLSv1

SSLSessionCacheTimeout 300