sureshmsi.co.nr

Disable SSLv2 and enable SSLv3 in the server in Ensim Linux Server

Posted by: sureshm on: October 26, 2007

Disable SSLv2 and enable SSLv3 in the server in Ensim Linux Server

Edit the conf of ssl

# vi /etc/httpd/conf.d/ssl.conf

Add/Edit the lines

SSLProtocol -All +SSLv3 +TLSv1
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:!SSLv2:+EXP
Restart Apache

/etc/init.d/httpd restart

You can connect the server using OpenSSL to test it :

openssl s_client -connect localhost:443

Replace the localhost with the server name

Leave a Reply

You must be logged in to post a comment.