How can i have SSLv3 Poodle when i disabled it.

[jeremyotten]

on my vHost test.azure-test.nl i have this config

SSLEngine on
SSLProtocol ALL -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite ECDH+AESGCMH+AESGCM:ECDH+AES256H+AES256:ECDH+AES128H+AES:ECDH+3DESH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
SSLCertificateFile /etc/letsencrypt/live/test.azure-test.nl/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/test.azure-test.nl/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/test.azure-test.nl/chain.pem
# Keeping bellow for future upgrades.
# Requires Apache >= 2.4
# SSLCompression off

the -SSLv3 should mean NO SSLv3 right.
But when you do the SSL lab test.. SSLv3 is on it says??
https://www.ssllabs.com/ssltest/analyze....re-test.nl

Please assist..

[TGates]

When I view the test it says SSL 3 No.... So it is off.

TLS 1.2
Yes
TLS 1.1
Yes
TLS 1.0
Yes
SSL 3
No
SSL 2
No

[jeremyotten]

When I view the test it says SSL 3 No.... So it is off.

TLS 1.2
Yes
TLS 1.1
Yes
TLS 1.0
Yes
SSL 3
No
SSL 2
No

But only after i also disabled SSL3 on the main ssl.conf (instead of only the vHost..)

Something to do with SNI and initial handshake

vi /etc/httpd/conf.d/ssl.conf
Add -SSLv3 after SSLProtocol ALL -SSLv2