ssl.conf - Good practice Apache2 SSL config

ssl.conf

<IfModule mod_ssl.c>

	SSLRandomSeed startup builtin
	SSLRandomSeed startup file:/dev/urandom 512
	SSLRandomSeed connect builtin
	SSLRandomSeed connect file:/dev/urandom 512

	AddType application/x-x509-ca-cert .crt
	AddType application/x-pkcs7-crl	.crl

	SSLPassPhraseDialog exec:/usr/share/apache2/ask-for-passphrase

	SSLSessionCache		shmcb:${APACHE_RUN_DIR}/ssl_scache(512000)
	SSLSessionCacheTimeout  300

	# Mutex file:${APACHE_LOCK_DIR}/ssl_mutex ssl-cache

	SSLCipherSuite HIGH:!aNULL:!eNULL:!EXPORT:!CAMELLIA:!DES:!MD5:!PSK:!RC4

	SSLHonorCipherOrder on

	SSLProtocol All -SSLv2 -SSLv3

	# SSLInsecureRenegotiation on

	# SSLStrictSNIVHostCheck On

</IfModule>