7 ms·
Disable SSLv2 and SSLv3 For Apache: SSLProtocol all -SSLv2 -SSLv3 For Nginx: ssl_protocols TLSv1 TLSv1.1 TLSv1.2; Source: http://blog.rlove.org/2013/12/str
by AbeEstrada 12y ago
Disable SSLv2 and SSLv3
For Apache:
SSLProtocol all -SSLv2 -SSLv3
For Nginx:
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
Source: http://blog.rlove.org/2013/12/strong-ssl-crypto.html http://blog.rlove.org/2013/12/strong-ssl-crypto.html
- ecaron 12y agoFor any unfortunate souls using IIS, Digicert has a walkthrough of disabling SSLv3 at https://www.digicert.com/ssl-support/iis-disabling-ssl-v3.htm https://www.digicert.com/ssl-support/iis-disabling-ssl-v3.ht...
- budgi3 12y agoFor IIS: Nartac IIS Crypto gives a nice GUI to manage all Protocols, Ciphers, Hashes and Key Exchanges https://www.nartac.com/Products/IISCrypto/ https://www.nartac.com/Products/IISCrypto/