FM / mods-enabled

/etc/apache2/mods-enabled

Name	Size	Mode	Actions
access_compat.load	100	0644	edit dl rm
alias.conf	843	0644	edit dl rm
alias.load	62	0644	edit dl rm
authn_core.load	72	0644	edit dl rm
authn_file.load	72	0644	edit dl rm
authz_core.load	72	0644	edit dl rm
authz_host.load	94	0644	edit dl rm
authz_user.load	94	0644	edit dl rm
auth_basic.load	94	0644	edit dl rm
autoindex.conf	3374	0644	edit dl rm
autoindex.load	70	0644	edit dl rm
deflate.conf	460	0644	edit dl rm
deflate.load	84	0644	edit dl rm
dir.conf	157	0644	edit dl rm
dir.load	58	0644	edit dl rm
env.load	58	0644	edit dl rm
filter.load	64	0644	edit dl rm
headers.load	66	0644	edit dl rm
mime.conf	7696	0644	edit dl rm
mime.load	60	0644	edit dl rm
mpm_event.conf	668	0644	edit dl rm
mpm_event.load	106	0644	edit dl rm
negotiation.conf	724	0644	edit dl rm
negotiation.load	74	0644	edit dl rm
proxy.conf	822	0644	edit dl rm
proxy.load	62	0644	edit dl rm
proxy_fcgi.load	89	0644	edit dl rm
proxy_http.load	89	0644	edit dl rm
proxy_wstunnel.load	97	0644	edit dl rm
reqtimeout.conf	1190	0644	edit dl rm
reqtimeout.load	72	0644	edit dl rm
rewrite.load	66	0644	edit dl rm
setenvif.conf	1373	0644	edit dl rm
setenvif.load	68	0644	edit dl rm
socache_shmcb.load	78	0644	edit dl rm
ssl.conf	3110	0644	edit dl rm
ssl.load	97	0644	edit dl rm
status.conf	749	0644	edit dl rm
status.load	64	0644	edit dl rm

Edit: /etc/apache2/mods-available/ssl.conf (3110B)

# Pseudo Random Number Generator (PRNG):
	# Configure one or more sources to seed the PRNG of the SSL library.
	# The seed data should be of good random quality.
	# WARNING! On some platforms /dev/random blocks if not enough entropy
	# is available. This means you then cannot use the /dev/random device
	# because it would lead to very long connection times (as long as
	# it requires to make more entropy available). But usually those
	# platforms additionally provide a /dev/urandom device which doesn't
	# block. So, if available, use this one instead. Read the mod_ssl User
	# Manual for more details.
	#
	SSLRandomSeed startup builtin
	SSLRandomSeed startup file:/dev/urandom 512
	SSLRandomSeed connect builtin
	SSLRandomSeed connect file:/dev/urandom 512

##
	##  SSL Global Context
	##
	##  All SSL configuration in this context applies both to
	##  the main server and all SSL-enabled virtual hosts.
	##

#
	#   Some MIME-types for downloading Certificates and CRLs
	#
	AddType application/x-x509-ca-cert .crt
	AddType application/x-pkcs7-crl	.crl

#   Pass Phrase Dialog:
	#   Configure the pass phrase gathering process.
	#   The filtering dialog program (`builtin' is a internal
	#   terminal dialog) has to provide the pass phrase on stdout.
	SSLPassPhraseDialog  exec:/usr/share/apache2/ask-for-passphrase

#   Inter-Process Session Cache:
	#   Configure the SSL Session Cache: First the mechanism 
	#   to use and second the expiring timeout (in seconds).
	#   (The mechanism dbm has known memory leaks and should not be used).
	#SSLSessionCache		 dbm:${APACHE_RUN_DIR}/ssl_scache
	SSLSessionCache		shmcb:${APACHE_RUN_DIR}/ssl_scache(512000)
	SSLSessionCacheTimeout  300

#   Semaphore:
	#   Configure the path to the mutual exclusion semaphore the
	#   SSL engine uses internally for inter-process synchronization. 
	#   (Disabled by default, the global Mutex directive consolidates by default
	#   this)
	#Mutex file:${APACHE_LOCK_DIR}/ssl_mutex ssl-cache

#   SSL Cipher Suite:
	#   List the ciphers that the client is permitted to negotiate. See the
	#   ciphers(1) man page from the openssl package for list of all available
	#   options.
	#   Enable only secure ciphers:
	SSLCipherSuite HIGH:!aNULL

# SSL server cipher order preference:
	# Use server priorities for cipher algorithm choice.
	# Clients may prefer lower grade encryption.  You should enable this
	# option if you want to enforce stronger encryption, and can afford
	# the CPU cost, and did not override SSLCipherSuite in a way that puts
	# insecure ciphers first.
	# Default: Off
	#SSLHonorCipherOrder on

#   The protocols to enable.
	#   Available values: all, SSLv3, TLSv1, TLSv1.1, TLSv1.2
	#   SSL v2  is no longer supported
	SSLProtocol all -SSLv3

#   Allow insecure renegotiation with clients which do not yet support the
	#   secure renegotiation protocol. Default: Off
	#SSLInsecureRenegotiation on

#   Whether to forbid non-SNI clients to access name based virtual hosts.
	#   Default: Off
	#SSLStrictSNIVHostCheck On

</IfModule>

# vim: syntax=apache ts=4 sw=4 sts=4 sr noet

cmd: