Spyderserve Web Development

Removing SSLv3 Support From Apache

To disable SSLv3 support for Apache you need to look for the ssl configuration file (in Centos it is at /etc/httpd/conf.d/ssl.conf) and modify the SSLProtocol line:

SSLProtocol all -SSLv2 -SSLv3

You can also add the line after SSLEngine On in a Virtual Host file.

Just be aware that old versions of Internet Explorer (<=6) do not have TLS enabled by default so any users still using this version will be left out in the cold.

Sources: https://www.digicert.com/ssl-support/apache-disabling-ssl-v3.htm

Spyderserve  PO Box 5831 Valdosta, Georgia 31603 United States