According to the Apache docs I can configure the cipher suite with (a.o.) two different keywords and examples on Internet often use both (but not necessarily identical to below example).
What is the difference between SSLProtocol
and SSLCipherSuite
, should I use them either or both?
SSLProtocol all -SSLv2 -SSLv3
SSLCipherSuite ALL:!SSLv2:!SSLv3
Or is it better to list individual ciphers for SSLCipherSuite
?
SSLCipherSuite ECDHE-RSA-RC4-SHA:ECDHE-RSA-AES128-SHA:AES128-SHA:RC4-SHA ...
Are both keywords fundamentally different in what they configure? I have this feeling I am overlooking something essential here.
Above configurations are not necessarily good practice, they're just an example to explain my doubt.