I have this line in /etc/apache2/mods-enabled/ssl.conf
SSLProtocol -all +TLSv1.2
However SSL checker whynopadlock still shows this:
Any ideas on how to completely disable TLSv1 in Apache 2.4 (Debian 8) ?
Asked
Active
Viewed 308 times
0
IMB
- 511
- 2
- 7
- 13
1 Answers
0
With Apache I always specify them in reverse, i.e. disabling the unwanted protocols. This follows the documentation's examples.
SSLProtocol all -SSLv3 -TLSv1
Michael Hampton
- 244,070
- 43
- 506
- 972
-
Tried it but `whynopadlock` still shows the same warning – IMB Aug 27 '18 at 05:17