Question

1

How force that all connections to my Apache use TLSv1.1 or TLSv1.2?

rated 0 times [ 1] [ 0] / answers: 1 / hits: 5876 / 2 Years ago, thu, january 27, 2022, 2:32:56

I tested on Ubuntu 12.04 (apache 2.2.22-1ubuntu1.4 and openssl 1.0.1-4ubuntu5.10) and Ubuntu 13.04 (apache 2.2.22-6ubuntu5.1 and openssl 1.0.1c-4ubuntu8.1).

here explain how to do so, but I have the following problems:

When try to use:

SSLProtocol all -SSLv2 -SSLv3 -TLSv1

I got the following error:

[error] No SSL protocols available [hint: SSLProtocol]

when try to use:

SSLProtocol TLSv1.1 TLSv1.2

I got the following error:

[error] No SSL protocols available [hint: SSLProtocol]

Th funny thing is that when I use:

SSLProtocol all -SSLv2 -TLSv1

apache don't complain and this test reported that my server not support SSLv2 and TLSv1.0, but yes SSLv3, TLSv1.1 and TLSv1.2.

Any explanation to that odd behavior? maybe the test tool is broken?

How can I enable just TLSv1.1 and TLSv1.2?

Answers

Only authorized users can answer the question. Please sign in first, or register a free account.

reangi

Add To Favorites

Follow

Total Points: 213

Total Questions: 102

Total Answers: 114

Location: Namibia

Member since Wed, Jan 19, 2022

2 Years ago

reangi questions

1 installing and running Stable Diffusion on 64-bit Ubuntu 22.04 LTS

Wed, May 31, 23, 06:02, 1 Year ago

1 Kernel update won't allow Nvidia 1660 drivers on Ubuntu 22.04 - how do I fix?

Thu, Apr 7, 22, 00:41, 2 Years ago

1 Permission denied could not read from remote repository

Wed, Jun 29, 22, 09:36, 2 Years ago

1 Can I extend the root partition with adjacent unallocated space?

Fri, Aug 5, 22, 07:48, 2 Years ago

1 Not showing available RAM

Tue, Nov 29, 22, 12:04, 1 Year ago

View All

answered 2 Years ago shadowoof · Accepted Answer

Setting SSLCipherSuite with just ciphers that are just supported in TLSv1.2 bypass the Apache 2.2 limitation of parse TLSv1.1 string to limited TLS to version over 1.0.