Apache SSLv3 - Apache: Disabling the SSL v3 Protocol ?

Apache: How to Disable the SSL v3 Protocol

Locate your SSL Protocol Configuration on your Apache server.

For example,

Type one the following commands:

1. grep -i -r "SSLProtocol" /etc/apache2 

   or 
   grep -i -r "SSLProtocol" /etc/httpd

   In these examples, /etc/apache2 and /etc/httpd are the base directory for an Apache installation.

   For a list of default base directories and installation layouts in Apache HTTPD for different operating systems, seeDistrosDefaultLayout.

   Note:

   If that command doesn’t find the “SSLProtocol” string, then look for SSLEngine by typing one of the following commands:

   grep -i -r "SSLEngine" /etc/apache2 
   or 
   grep -i -r "SSLEngine" /etc/httpd

   The command will output the available Virtual Hosts or your config file.

Open the config file or Virtual Host for which you are disabling the SSL v3 protocol.

Add or update the following lines in your configuration:

SSLProtocol all -SSLv2 -SSLv3

Note:

If you used the grep -i -r "SSLEngine"… command, you need to search for “SSLEngine On” and add SSLProtocol all -SSLv2 -SSLv3in the line beneath it.

Restart Apache.

For example, type the following command:

apachectl -k restart

You have successfully disabled the SSL v3 protocol.

• Comment
• Edit
• Delete
• Convert as a comment

Support

Support

5000

| 2 1 2

Answered on 9/26/15, 4:11 PM

0

vote