apache:disable_ssl_v2_v3_support

This is an old revision of the document!


Apache - Disable SSL v2/v3 support

The SSL v2/v3 protocol has been proven to be insecure. Disable Apache support for the protocol and force the use of the newer protocols.

sudo vi /etc/apache2/mods-available/ssl.conf

Change this line from :

/etc/apache2/mods-available/ssl.conf
SSLProtocol all -SSLv3

To the following and save.

/etc/apache2/mods-available/ssl.conf
SSLProtocol all -SSLv2 -SSLv3

Restart the Apache server, open a Terminal Window and enter :

sudo service apache2 restart
apache/disable_ssl_v2_v3_support.1468332094.txt.gz · Last modified: 2020/07/15 09:30 (external edit)

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki