Log In | Register | October 23, 2017

Share
 

Linux - November 3, 2014

POODLE Disable SSL V3 on Apache

Below is a quick way to disable SSL v3 for apache configurations.

Lets start off by creating a new file in our /etc/httpd/conf.d/ directory. You can name this file whatever you’d like. In this example we are using a Plesk on a RHEL based system.

1. Create file

touch /etc/httpd/conf.d/zz050-psa-disable-weak-ssl-ciphers.conf

2. Add following contents to file

SSLHonorCipherOrder on
SSLProtocol ALL -SSLv2 -SSLv3
SSLCipherSuite ALL:!ADH:!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM

3. Finally restart services

service httpd restart

If you are using Plesk, also restart plesk.
service psa stop && service psa start

Post By: | FavoriteLoadingAdd to favorites

0 Comments

Leave a Comment



Need Help? Ask a Question

Ask anything you want from how to questions to debug. We're here to help.

You Must Be Logged In To Post A Question.

Log In or Register