apache/server/ssl.yml

parameters:
  _param:
    apache_ssl_enabled: false
    apache_ssl:
      mode: 'strict'
      enabled: ${_param:apache_ssl_enabled}
      engine: salt
      prefer_server_ciphers: "on"
      protocols:
        all:
          name: 'all'
          enabled: True
        excludeSSLv2:
          name: '-SSLv2'
          enabled: True
        excludeSSLv3:
          name: '-SSLv3'
          enabled: True
      ciphers:
        ECDHE-ECDSA-CHACHA20-POLY1305:
          name: 'ECDHE-ECDSA-CHACHA20-POLY1305'
          enabled: True
        ECDHE-RSA-CHACHA20-POLY1305:
          name: 'ECDHE-RSA-CHACHA20-POLY1305'
          enabled: True
        ECDHE-ECDSA-AES128-GCM-SHA256:
          name: 'ECDHE-ECDSA-AES128-GCM-SHA256'
          enabled: True
        ECDHE-RSA-AES128-GCM-SHA256:
          name: 'ECDHE-RSA-AES128-GCM-SHA256'
          enabled: True
        ECDHE-ECDSA-AES256-GCM-SHA384:
          name: 'ECDHE-ECDSA-AES256-GCM-SHA384'
          enabled: True
        ECDHE-RSA-AES256-GCM-SHA384:
          name: 'ECDHE-RSA-AES256-GCM-SHA384'
          enabled: True
        DHE-RSA-AES128-GCM-SHA256:
          name: 'DHE-RSA-AES128-GCM-SHA256'
          enabled: True
        DHE-RSA-AES256-GCM-SHA384:
          name: 'DHE-RSA-AES256-GCM-SHA384'
          enabled: True
        ECDHE-ECDSA-AES128-SHA256:
          name: 'ECDHE-ECDSA-AES128-SHA256'
          enabled: True
        ECDHE-RSA-AES128-SHA256:
          name: 'ECDHE-RSA-AES128-SHA256'
          enabled: True
        ECDHE-ECDSA-AES128-SHA:
          name: 'ECDHE-ECDSA-AES128-SHA'
          enabled: True
        ECDHE-RSA-AES256-SHA384:
          name: 'ECDHE-RSA-AES256-SHA384'
          enabled: True
        ECDHE-RSA-AES128-SHA:
          name: 'ECDHE-RSA-AES128-SHA'
          enabled: True
        ECDHE-ECDSA-AES256-SHA384:
          name: 'ECDHE-ECDSA-AES256-SHA384'
          enabled: True
        ECDHE-ECDSA-AES256-SHA:
          name: 'ECDHE-ECDSA-AES256-SHA'
          enabled: True
        ECDHE-RSA-AES256-SHA:
          name: 'ECDHE-RSA-AES256-SHA'
          enabled: True
        DHE-RSA-AES128-SHA256:
          name: 'DHE-RSA-AES128-SHA256'
          enabled: True
        DHE-RSA-AES128-SHA:
          name: 'DHE-RSA-AES128-SHA'
          enabled: True
        DHE-RSA-AES256-SHA256:
          name: 'DHE-RSA-AES256-SHA256'
          enabled: True
        DHE-RSA-AES256-SHA:
          name: 'DHE-RSA-AES256-SHA'
          enabled: True
        ECDHE-ECDSA-DES-CBC3-SHA:
          name: 'ECDHE-ECDSA-DES-CBC3-SHA'
          enabled: True
        ECDHE-RSA-DES-CBC3-SHA:
          name: 'ECDHE-RSA-DES-CBC3-SHA'
          enabled: True
        EDH-RSA-DES-CBC3-SHA:
          name: 'EDH-RSA-DES-CBC3-SHA'
          enabled: True
        AES128-GCM-SHA256:
          name: 'AES128-GCM-SHA256'
          enabled: True
        AES256-GCM-SHA384:
          name: 'AES256-GCM-SHA384'
          enabled: True
        AES128-SHA256:
          name: 'AES128-SHA256'
          enabled: True
        AES256-SHA256:
          name: 'AES256-SHA256'
          enabled: True
        AES256-SHA:
          name: 'AES256-SHA'
          enabled: True
        AES128-SHA:
          name: 'AES128-SHA'
          enabled: True
        DES-CBC3-SHA:
          name: 'DES-CBC3-SHA'
          enabled: True
        removeDSS:
          name: '!DSS'
          enabled: True