Home / server / Questions / 928081
In Process
IMB
Asked: 2018-08-27 12:43:59 +0800 CST

How to disable TLSv1 in Apache 2.4 (Debian 8)?

  • 772

I have this line in /etc/apache2/mods-enabled/ssl.conf

SSLProtocol -all +TLSv1.2

However SSL checker whynopadlock still shows this:

enter image description here

Any ideas on how to completely disable TLSv1 in Apache 2.4 (Debian 8) ?

debian

1 Answers

  1. With Apache I always specify them in reverse, i.e. disabling the unwanted protocols. This follows the documentation's examples.

    SSLProtocol all -SSLv3 -TLSv1
    • 0