Difference between revisions of "Apache SSL/TLS Security Settings"
IVSWikiBlue (talk | contribs) (Created page with "# Connect to the server via ssh or access the shell via the console. # Type '''sudo nano /etc/apache2/sites-enabled/default-ssl.conf''' # Locate the line in the file '''SSLPro...") |
(No difference)
|
Revision as of 11:24, 3 January 2018
- Connect to the server via ssh or access the shell via the console.
- Type sudo nano /etc/apache2/sites-enabled/default-ssl.conf
- Locate the line in the file SSLProtocol ALL -SSLv2
- Comment out this line by placing a # at the beginning of the line.
- Add the following lines below the line that you just commented out:
- SSLProtocol ALL -SSLv2 -SSLv3
- SSLHonorCipherOrder On
- SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:RSA+AESGCM:RSA+AES:!aNULL:!MD5:!DSS
- Press CTRL-X to exit
- Enter Y to save changes.
- Do not change the name and press enter to save the changes.
- Type sudo service apache2 restart