Search code examples
apachesslpoodle-attacktransport-security

Poodle vulnerability need to change SSL 3.0 to TLS


I have implemented SSL(https) in my website, but when I checked the certificate it is showing poodle vulnerability. So it suggests me that I needed to change SSL 3.0 to TLS. I am using Apache2.4. Please guide me how can I change SSL 3.0 to TLS.


Solution

  • Apache

    To disable SSLv3 on your Apache server you can configure it using the following, both in the SSL configuration section and in all SSL-enabled virtual hosts explicitly:

    SSLProtocol All -SSLv2 -SSLv3