For CentOS & cPanel servers, here are the steps to take for the SSLv3 vulnerability that recently emerged:
nano /usr/local/apache/conf/includes/pre_main_global.confOpen the file and add the following code:
(For CentOS 6)
SSLHonorCipherOrder On
SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2(For CentOS 5)
SSLHonorCipherOrder On
SSLProtocol -All +TLSv1Then restart Apache:
/etc/init.d/httpd restartFor testing, you can either perform an online query or run the following command from a CentOS server:
openssl s_client -connect www.DOMAIN.COM:443 -ssl3The query result should not contain BEGIN CERTIFICATE.
Leave a Comment
* Your comment will be published after approval.
Comments
0No comments yet. Be the first to comment!