Control Web Panel

WebPanel => SSL => Topic started by: LostnIL on July 17, 2018, 09:25:26 PM

Title: Disable Insecure TLS
Post by: LostnIL on July 17, 2018, 09:25:26 PM

How do I disable insecure protocols.

I added the below to /usr/local/apache/conf.d/vhosts-ssl.conf, restarted Apache and PCI scans still show 1.1 as being served. What gives?

SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1

Title: Re: Disable Insecure TLS
Post by: studio4host on July 18, 2018, 12:50:19 PM

all depends on the webservers which you use, if you use nginx then you can edit nginx template and for apache apache conf.

Title: Re: Disable Insecure TLS
Post by: LostnIL on July 19, 2018, 04:22:18 PM

Thanks.