How to disable anonymous (insecure) suites ? Ref: SSLLABS
I have Installed a SSL Certificate for Cpanel/WHM it's installed correctly when checking at ssllabs.com/ssltest I get the following error :
This server supports anonymous (insecure) suites (see below for details). Grade set to F.
Cipher Suites (sorted by strength; the server has no preference)
[PHP]TLS_ECDH_anon_WITH_RC4_128_SHA (0xc016) INSECURE 128
TLS_ECDH_anon_WITH_AES_128_CBC_SHA (0xc018) INSECURE 128
TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA (0xc017) INSECURE 112
TLS_ECDH_anon_WITH_AES_256_CBC_SHA (0xc019) INSECURE 256
TLS_ECDH_anon_WITH_RC4_128_SHA (0xc016) INSECURE 128
TLS_ECDH_anon_WITH_3DES_EDE_CBC_SHA (0xc017) INSECURE 112
TLS_ECDH_anon_WITH_AES_128_CBC_SHA (0xc018) INSECURE 128
TLS_ECDH_anon_WITH_AES_256_CBC_SHA (0xc019) INSECURE 256[/PHP]
this is it:
/https://www.ssllabs.com/ssltest/analyze.html?d=lebwindow.net
-
Hello :) You can browse to the following option in Web Host Manager: "WHM Home " Service Configuration " Apache Configuration " Global Configuration" Use the following cipher under "SSL Cipher Suite" to disable anonymous ciphers: ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP:!kEDH:!aNULL
Thank you.0
Please sign in to leave a comment.
Comments
1 comment