PFIZ-5748

diff --git a/customer/pfizer/dev-web02-pfizer-de.pixelpark.net.yaml b/customer/pfizer/dev-web02-pfizer-de.pixelpark.net.yaml
index 548a4680b11b4e9a6ea01a7f19ddda8f55d9f6ac..ad70cf11b7c75bda2cb3de67cfdda4a6e2af5615 100644 (file)
--- a/customer/pfizer/dev-web02-pfizer-de.pixelpark.net.yaml
+++ b/customer/pfizer/dev-web02-pfizer-de.pixelpark.net.yaml
@@ -5,6 +5,8 @@ infra::additional_classes:
   - infra::profile::mysql_server
   - infra::profile::postfix
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+
 repo::remi_php56: true
 
 php::settings:
@@ -69,7 +71,7 @@ infra::profile::typo3::projects:
     ssl_chain: /etc/pki/tls/certs/wildcard.pixelpark.net-cert.pem
     ssl_key: /etc/pki/tls/private/wildcard.pixelpark.net-key.pem
 #    ssl_ciphers: 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH'
-#    ssl_protocols: 'TLSv1.2' 
+#    ssl_protocols: 'TLSv1.2'
 
     #ssl_cipher:    ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP
     #SetEnvIf User-Agent   ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0

diff --git a/customer/pfizer/test-web01-pfizer-de.pixelpark.net.yaml b/customer/pfizer/test-web01-pfizer-de.pixelpark.net.yaml
index 8567341989c721af83df7276853f3e4411fbbde1..837083f00caa7c9d1bd7dba2d01bbd1d7382f35c 100644 (file)
--- a/customer/pfizer/test-web01-pfizer-de.pixelpark.net.yaml
+++ b/customer/pfizer/test-web01-pfizer-de.pixelpark.net.yaml
@@ -6,6 +6,8 @@ infra::additional_classes:
   - infra::profile::mysql_server
   - infra::profile::postfix
 
+apache::mod::ssl::ssl_cipher: 'EECDH+AES:EDH+AES:!SHA1:!aNULL@STRENGTH'
+
 repo::remi_php56: true
 
 php::settings: