Disable weak ciphers and older TLS support
By Geoff W. on Apr. 18, 2008.
Disable SSLv2/TLS1 for PCI Compliance
Add the following to httpd.conf:
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:-SSLv2:-RC4:+EXP
Disable SSLv2/TLS1 for PCI Compliance
Add the following to httpd.conf:
SSLProtocol all -SSLv2
SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:-SSLv2:-RC4:+EXP
Sorry, comments for this entry are closed at this time.
Category: Apache