Editing Apache Hardening (section)

== Disabling SSL Session Tickets and Compression ==
On top of using strong SSL protocols and ciphers, disabling SSL session tickets and compression can further improve security.  As SSL session tickets can last a long time, this makes then vulnerable to being cracked.  Apache recommends if you use session tickets that your restart the webserver regularly (i.e. daily).  This is not ideal and far outweighs the small efficiency benefit over using SSL session IDs, so the simplest solution is to disable.  Using SSL compression may give a small performance improvement but has various security issues TLS (SSL) compression is not used by most modern browsers due to potential information leakage, so it is easiest just to turn this off as well.

To disable both SSL session tickets and compression you need to add the following two lines to your EPrints repository archive's ''ssl/securevhost.conf'':
 SSLSessionTickets off
 SSLCompression off