Loading...

Weak SSL Cipher在Apache中禁用過時的SSL / TLS版本

Temperature: 0 °C

Mark ChangMark Chang
使用vi(或vim)編輯ssl.conf (通常位於/etc/httpd/conf.d/底下)

查詢SSL Protocol support
# SSL Protocol support:
# List the enable protocol levels with which clients will be able to
# connect. Disable SSLv2 access by default:
SSLProtocol all -SSLv2 -SSLv3

註解掉SSLProtocol all -SSLv2 -SSLv3

添加
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1

往下拉底下SSL Cipher Suite部分也一併處理
# SSL Cipher Suite:
# List the ciphers that the client is permitted to negotiate.
# See the mod_ssl documentation for a complete list.
SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA

註解掉SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA
添加
SSLCipherSuite HIGH:!aNULL:!MD5:!3DES
SSLHonorCipherOrder on

最後~保存文件並重新啟動Apache

以上紀錄
https://innstory.com/story-Weak_SSL_Cipher在Apache中禁用過時的SSL__TLS版本-2097

Prev
 WordPress如何關閉迴響留言功能?

Next
分享_成功人士剛起步時和一般人的差異並不大!現代網路之父安德森給 

About the Author

Mark Chang

離不開電腦的宅男

Visitor message

Leave some footprints to prove that you visited me

Recommended reading

Author's other related stories

分享 吃蝗蟲治「武漢肺炎」中國網民樂翻:天賜良藥!

分享 吃蝗蟲治「武漢肺炎」中國網民樂翻:天賜良藥!

蝗蟲 VS 中國 雖然這不是開玩笑的時候。 所以我該替蝗蟲擔心嗎?...

分享 CNNs Anthony Bourdain dead at 61

分享 CNN\'s Anthony Bourdain dead at 61

難以置信,我還蠻喜歡看他的節目的。 或許....人都有過不去的坎,無論你是功成名就又或...

分享 颱風放假一天,但你知道日韓沒颱風假嗎?-風傳媒

分享 颱風放假一天,但你知道日韓沒颱風假嗎?-風傳媒

這倒是讓我記起日本電影「 生存家族」裡的劇情~ 故事是設置在沒有電的環境作為舞台開始~...

Please select an option

error

Hi, thank you for your participation, but you cannot vote repeatedly~

Join innstory now and start recording your story.

"Innstory" is a place to store stories. We are committed to becoming a warm platform. Deepening the bonds between people is our direction.
We are convinced that the blockchain between people is not just a cold calculation. Join us now.

Wrong format