+- Sentora Support Forums (https://senforums.mach-hosting.com)
+-- Forum: Sentora Forum Archives (https://senforums.mach-hosting.com/forumdisplay.php?fid=5)
+--- Forum: Sentora Public Support Forums v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=32)
+---- Forum: General Support Forum v1.0.x (https://senforums.mach-hosting.com/forumdisplay.php?fid=36)
+---- Thread: How can i have SSLv3 Poodle when i disabled it. (/showthread.php?tid=2751)
How can i have SSLv3 Poodle when i disabled it. - jeremyotten - 04-07-2016
on my vHost test.azure-test.nl i have this config
SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCM
H+AESGCM:ECDH+AES256H+AES256:ECDH+AES128H+AES:ECDH+3DESH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSSSSLCertificateFile /etc/letsencrypt/live/test.azure-test.nl/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/test.azure-test.nl/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/test.azure-test.nl/chain.pem
# Keeping bellow for future upgrades.
# Requires Apache >= 2.4
# SSLCompression off
the -SSLv3 should mean NO SSLv3 right.
But when you do the SSL lab test.. SSLv3 is on it says??
https://www.ssllabs.com/ssltest/analyze.html?d=test.azure-test.nl
Please assist..
RE: How can i have SSLv3 Poodle when i disabled it. - TGates - 04-08-2016
When I view the test it says SSL 3 No.... So it is off.
Quote:TLS 1.2
Yes
TLS 1.1
Yes
TLS 1.0
Yes
SSL 3
No
SSL 2
No
RE: How can i have SSLv3 Poodle when i disabled it. - jeremyotten - 04-08-2016
(04-08-2016, 03:27 AM)TGates Wrote: When I view the test it says SSL 3 No.... So it is off.
Quote:TLS 1.2
Yes
TLS 1.1
Yes
TLS 1.0
Yes
SSL 3
No
SSL 2
No
But only after i also disabled SSL3 on the main ssl.conf (instead of only the vHost..)
Something to do with SNI and initial handshake
vi /etc/httpd/conf.d/ssl.conf
Add -SSLv3 after SSLProtocol ALL -SSLv2