Monday, 18 December 2023

Apache how to disable tls1.0, 1.1

test if TLS 1.1, 1.0 is supported:

 https://stackoverflow.com/questions/40557031/command-prompt-to-check-tls-version-required-by-a-host


For TLS 1.2:

openssl s_client -connect www.google.com:443 -tls1_2

For TLS 1.1:

openssl s_client -connect www.google.com:443 -tls1_1

For TLS 1:

openssl s_client -connect www.google.com:443 -tls1


diable 1.0, 1.1 in apache
https://www.ssl.com/guide/disable-tls-1-0-and-1-1-apache-nginx/

go to your sites/my-site-ssl.conf:
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1

No comments:

Post a Comment