Posts

Showing posts from April, 2019

Apache Disable Outdated SSL/TLS versions

Following configurations will get you high security cipher SSL configurations in Apache by updating the ssl config file. ##To disable TLS 1.0/1.1 and SSL 2.0/3.0 SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 ## To enable only high degree of protection SSLCipherSuite HIGH:!aNULL:!MD5:!3DES ## To use server cipher preferences instead of client preferences SSLHonorCipherOrder on