This complex directive uses a colon-separated “cipher-spec” string consisting of OpenSSL cipher specifications to configure the cipher suite that the client negotiates in the SSL handshake phase.
Note: This is the global SSLCipherSuite setting. You can also set SSLCipherSuite in other contexts (for example, a VirtualHost). In that context, it would override the global setting. This can cause PCI scans to fail port 443 even if SSLCipherSuite is set appropriately in this interface. For information on how to check for that situation and address it,