Gentoo Archives: gentoo-user

From: staticsafe <me@××××××××××.ca>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] disable SSLv3 in apache2?
Date: Sat, 09 Aug 2014 23:08:43
Message-Id: 53E6A0E0.4080001@staticsafe.ca
In Reply to: [gentoo-user] disable SSLv3 in apache2? by Grant
1 On 8/9/2014 14:59, Grant wrote:
2 > I recently upgraded from apache-2.2.27 to apache-2.2.27-r4 and
3 > etc-update wanted to add the following directive to the default SSL
4 > vhost:
5 >
6 > SSLProtocol ALL -SSLv2 -SSLv3
7 >
8 > I had already disabled SSLv2 (security issue?) but this also disables
9 > SSLv3. Could that cause a compatibility issue?
10 >
11 > - Grant
12 >
13
14 You can use something like Qualys SSL Labs[0] to test if anything breaks.
15
16 https://www.ssllabs.com/ssltest/index.html
17
18 --
19 staticsafe
20 XMPP - staticsafe@××××××.org

Replies

Subject Author
Re: [gentoo-user] disable SSLv3 in apache2? Grant <emailgrant@×××××.com>