!2 add SSLCipherSuite

Merge pull request !2 from IT砖瓦工/loc_zhuchl

httpd.spec

@@ -8,7 +8,7 @@
 Name:             httpd
 Summary:          Apache HTTP Server
 Version:          2.4.34
-Release:          13
+Release:          14
 License:          ASL 2.0
 URL:              https://httpd.apache.org/
 Source0:          https://www.apache.org/dist/httpd/httpd-%{version}.tar.bz2
@@ -535,6 +535,12 @@ exit $rv
 %{_rpmconfigdir}/macros.d/macros.httpd
 
 %changelog
+* Sun Jan 19 2020 openEuler Buildteam <buildteam@openeuler.org> - 2.4.34-14
+- Type:bugfix
+- ID:NA
+- SUG:NA
+- DESC:add SSLCipherSuite 
+
 * Sat Jan 11 2020 openEuler Buildteam <buildteam@openeuler.org> - 2.4.34-13
 - Type:NA
 - ID:NA

ssl.conf

@@ -86,8 +86,8 @@ SSLHonorCipherOrder on
 #   See the mod_ssl documentation for a complete list.
 #   The OpenSSL system profile is configured by default.  See
 #   update-crypto-policies(8) for more details.
-SSLCipherSuite PROFILE=SYSTEM
-SSLProxyCipherSuite PROFILE=SYSTEM
+SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SHA1:!RC4 
+SSLProxyCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SHA1:!RC4
 
 #   Point SSLCertificateFile at a PEM encoded certificate.  If
 #   the certificate is encrypted, then you will be prompted for a