Now change this line in your configuration file like below find the “ SSLProtocol” and change with below line: SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 In Ubuntu/Debian /etc/apache2/sites-enabled In Redhat/CentOS/Fedora /etc/httpd/conf/sites-enabled If it is configured in Virtual Host you can find it here: In Redhat/CentOS/Fedora /etc/httpd/conf/nf I am going to change in default Apache config file : You may be need to change multiple location depends on your configuration. Here I am gong to disable tls 1.0 or 1.1 or SSLv2 and SSLv3 in Apache. Disable TLS 1.0 and 1.1 or SSLv2 and SSLv3 in Apache Due to this reason we should disable tls 1.0 and tls 1.1 or SSLv2, SSLv3 in your server configuration and enable TLS 1.2 or 1.3. Over the year vulnerabilities have been discovered in the deprecated SSL and TLS protocols. In the Corona epidemic a lots of incident happened due to hacking activity. During this time a server also provide its digital certificates to the client. When handshake happens the client and server exchange multiple ciphers and hash algorithms.
For instance: when a client connect to a web server a handshake will happen starting a TLS or SSL connection. SSL (Secure Socket layer) and TLS ( Transport Layer Security both are cryptographic protocols that provide communication security over network. In this tutorial we learn how to disable TLS 1.0 and 1.1 in Apache/Nginx or Tomcat.
Disable TLS 1.0 and 1.1 or SSLv2 and SSLv3 in Tomcat.Disable TLS 1.0 and 1.1 or SSLv2 and SSLv3 in Nginx.Disable TLS 1.0 and 1.1 or SSLv2 and SSLv3 in Apache.
0 kommentar(er)
