SSL3

rene123

• March 11, 2015 02:49

I get "ssl 3.0 outdated warning" when I check my SSL cert on TLS 1.0, SSL 3.0, SSL 2.0- SSL 3.0 is an outdated protocol version with known vulnerabilities. How can I fix this?"

• 

  Infopro

  • March 11, 2015 10:15

  On top of forums, is a search tool link, click that and search for SSL3. have a read thru all of those threads.

  0
• 

  rene123

  • March 12, 2015 07:05

  I've done that. Cpanel seems to have applied a fix, which seems to appear in my apache config in whm, but digicert still gives warnings. And btw, this thread is 7 pages long about the problem. Maybe more people then me want a fast answer instead of reading through all 7 pages.

  0
• 

  cPanelMichael

  • March 12, 2015 17:56

  Hello, Here are the instructions to disable SSLv3 for Apache: 1. Go to WHM => Service Configuration => Global Configuration. 2. SSL/TLS Cipher Suite (the second option, not "SSL Cipher Suite") should contain "All -SSLv2 -SSLv3". 3. Go to the bottom of the page, and select the Save button to restart the service. If you still receive a warning after this, please contact DigiCert's support team as it might be a false positive. Thank you.

  0
• 

  Infopro

  • March 12, 2015 18:11

  Maybe more people then me want a fast answer instead of reading through all 7 pages.

  
  Agreed. Still, reading these threads may be of some use. We've got some very smart folks on these forums, posting in those threads, and it's worth reading up on the topic you're interested in regardless of how busy you are. I'm fairly certain cPanelMichaels suggestion above is mentioned in that 7 page thread, reading thru it gives context to the topic. My apologies for not providing a proper answer to you quicker.

  0
• 

  rene123

  • March 13, 2015 08:13

  Hello, Here are the instructions to disable SSLv3 for Apache: 1. Go to WHM => Service Configuration => Global Configuration. 2. SSL/TLS Cipher Suite (the second option, not "SSL Cipher Suite") should contain "All -SSLv2 -SSLv3". 3. Go to the bottom of the page, and select the Save button to restart the service. If you still receive a warning after this, please contact DigiCert's support team as it might be a false positive. Thank you.
  Thanks for your answer. Got "All -SSLv2 -SSLv3 - default". Rebuilt apache in february so this fix should have been applied by then, still digicert shows the error. So yea, it's probably a false positive from them.

  0
• 

  rene123

  • March 13, 2015 08:41

  Infopro, don't get me wrong. I really appreciate the fast help everyone gets here. Cpanel seems to be a great company that cares about its customers. My question haven't been answered in a short thread, and I think other people now can find this thread though Google or forum search without having to write the question again (but I should have written a better title for other users, sorry about that one).

  0
• 

  joako

  • March 21, 2015 00:01

  Run this test and see what it says:

  0

Please sign in to leave a comment.