Siemens SINUMERIK 840D pl Manual page 67

##
## SSL Global Context
##
## All SSL configurations in this context apply to
## the main server and all SSL-enabled virtual hosts.
##
# SSL Cipher Suite:
# List the ciphers that the client is permitted to negotiate,
# and that httpd will negotiate as the client of a proxied server.
# See the OpenSSL documentation for a complete list of ciphers, and
# ensure they follow appropriate best practices for this deployment.
# httpd 2.2.30, 2.4.13 and later force-disable aNULL, eNULL and EXP
ciphers,
# while OpenSSL disabled these by default in 0.9.8zf/1.0.0r/1.0.1m/
1.0.2a.
#SSLCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES
#SSLProxyCipherSuite HIGH:MEDIUM:!MD5:!RC4:!3DES
Note: Run the following lines as a command:
SSLCipherSuite ECDHE-RSA-AES128-CBC-SHA256:ECDHE-RSA-AES128-GCM-
SHA256:ECDHE-RSA-AES256-GCM-SHA384:AES128-SHA256
Note: Run the following lines as a command:
SSLProxyCipherSuite ECDHE-RSA-AES128-CBC-SHA256:ECDHE-RSA-AES128-
GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:AES128-SHAhttps://
defthw99wvesrv.ad001.siemens.net:4003/Themes/CustomControls/
Viewlets/CloseBtn.gif256
# By the end of 2016, only TLSv1.2 ciphers should remain in use.
# Older ciphers should be disallowed as soon as possible, while the
# kRSA ciphers do not offer forward secrecy. These changes inhibit
# older clients (such as IE6 SP2 or IE8 on Windows XP, or other
legacy
# non-browser tooling) from successfully connecting.
#
# To restrict mod_ssl to use only TLSv1.2 ciphers, and disable
# those protocols that do not support forward secrecy, replace
# the SSLCipherSuite and SSLProxyCipherSuite directives above with
# the following two directives, as soon as practicable.
# SSLCipherSuite HIGH:MEDIUM:!SSLv3:!kRSA
# SSLProxyCipherSuite HIGH:MEDIUM:!SSLv3:!kRSA
Manage MyMachines /Remote - installation in existing control environments
Application examples, 10/2018, A5E45211403B AB
Installation/configuration
4.5 SIMATIC IoT2040
67