From 6a7c5b32260b1ef2a491bcfcfb51db8c1ee20714 Mon Sep 17 00:00:00 2001
From: Jonas Smedegaard <dr@jones.dk>
Date: Thu, 28 Apr 2016 03:01:28 +0200
Subject: Avoid GnuTLSSessionTickets (not to be used together with cache, and
 possibly bad for Perfect Forward Secrecy).

---
 apache2/conf.d/local-gnutls.conf | 1 -
 1 file changed, 1 deletion(-)

(limited to 'apache2')

diff --git a/apache2/conf.d/local-gnutls.conf b/apache2/conf.d/local-gnutls.conf
index 7c065ed..9db70dc 100644
--- a/apache2/conf.d/local-gnutls.conf
+++ b/apache2/conf.d/local-gnutls.conf
@@ -1,5 +1,4 @@
 GnuTLSEnable on
-GnuTLSSessionTickets on
 GnuTLSPriorities NORMAL
 GnuTLSCertificateFile /etc/ssl/certs/apache2+cacert.org.pem
 GnuTLSKeyFile /etc/ssl/private/apache2.pem
-- 
cgit v1.2.3