Empfehlungen für Apache2

Vorschlag von Letsencrypt

DHE-RSA-AES256-SHA256

Symmetrische Verschlüsselung	AES128-GCM	AES256-GCM	CHACHA20-POLY130
Asymmetrische Verschlüsselung	RSA	ECDSA
Hash Algorythmus	SHA256	SHA384
Diffie Hellman	DHE	ECDHE

SSLEngine on

SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1

SSLCipherSuite ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:

SSLHonorCipherOrder on

SSLCompression off

SSLSessionTickets off

SSLCompression off

SSLOptions +StrictRequire

Glossar

• EC - Elliptic Curve
• GSM - Galios Counter Mode

Quelle

• https://www.ssl.com/de/leiten/tls-Einhaltung-von-Standards/