Don't know if you ran across this, but maybe it will be some assistance,
Hope you are doing well.
On 2/2/21 6:33 PM, Jeffrey Ross via users wrote:
> System is Fedora 33 I'm attempting to enable Perfect Forwarding
> Secrecy (PFS) in Apache.
> I started by setting the options I wanted in Apache only to find that
> the SSL options for Ciphers are ignored in the Apache configuration
> and instead are pulled from /etc/crypto-policies/back-ends directory.
> I was able to disallow any TLS protocol below 1.2 in
> opensslcnf.config, but not sure what I need to enable PFS.
> Suggestions would be appreciated.
> Thanks Jeff
> users mailing list -- users(a)lists.fedoraproject.org
> To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: