I am using the directive:
Code: Select all
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
I have read the following:
https://serverfault.com/questions/84817 ... -in-apache
https://stackoverflow.com/questions/434 ... apache-2-4
https://serverfault.com/questions/51396 ... -in-apache
https://bugs.launchpad.net/ubuntu/+sour ... omments/12
I have NOT yet added a 'Protocol' directive to /etc/ssl/openssl.cnf.
The SSLProtocol directives are simply ignored.
I should add that this directive works fine on Apache 2.4.25 on Debian 9.5.
Am I missing something obvious, or is this a bug that has not yet been fixed?
Thanks,
-Wes