bi.pfizer ssl change

diff --git a/customer/pfizer/web01-pfizer-de.pixelpark.net.yaml b/customer/pfizer/web01-pfizer-de.pixelpark.net.yaml
index fcf57c331c48cad9ce45bc3adde12f47082b9147..d3d1c359b3763c891842e4da416eb7eb5ed3ae23 100644 (file)
--- a/customer/pfizer/web01-pfizer-de.pixelpark.net.yaml
+++ b/customer/pfizer/web01-pfizer-de.pixelpark.net.yaml
@@ -6,7 +6,9 @@ infra::additional_classes:
   - infra::profile::mysql_server
   - apache::mod::remoteip
 
-apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+#apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+apache::mod::ssl::ssl_cipher: 'AES256+EECDH:AES256+EDH:AES128+EECDH:AES128+EDH'
+apache::mod::ssl::ssl_protocols: 'TLSv1.2'
 
 apache::default_vhost: false