Disabling SSLv2

Edit ssl.conf:

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:+EXP:+SSLv3:+TLSv1

test with:

# curl --cipher SSLv2 https://www.url.com
curl: (35) SSL: error:14077417:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert illegal parameter
# curl --cipher SSLv3 https://www.url.com
HI THIS IS MY SSL WEB PAGE ISN'T IT GREAT

Submitted by jkelly on Tue, 2007-07-10 22:37. categories [ | ] login or register to post comments