[CentOS] Apache and SSLv3
Alessandro Baggi
alessandro.baggi at gmail.com
Thu Jan 29 10:41:25 UTC 2015
On 01/26/2015 06:48 PM, Ken wrote:
>> I'm configuring apache with https and I've a question about sslv3
>> deactivation.
>>
>> Running "openssl ciphers -v" I get a list of cypher suite of openssl
>> like:
>>
>> ECDH-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH/RSA Au=ECDH Enc=AESGCM(128)
>> Mac=AEAD
>> .........
>>
>
> SSLProtocol all -SSLv2 -SSLv3
> SSLHonorCipherOrder on
> SSLCompression off
>
> Then use cipher suite to your liking.
> Modern, Intermediate, Old, from...
>
> https://wiki.mozilla.org/Security/Server_Side_TLS#Apache
>
> Test via...
>
> https://www.ssllabs.com/ssltest/
>
>
>
>
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> http://lists.centos.org/mailman/listinfo/centos
>
Thanks friend for your answer.
More information about the CentOS
mailing list