Menu
To enable TLS 1.2 in Apache, you will need to change/add the SSLProtocol directive. To do any of this, mod_ssl should be enabled, if not, use the command sudo a2enmod ssl . You can also support TLSv1. 3 if you have OpenSSL 1.1.
Client Behavior The TLS_FALLBACK_SCSV cipher suite value is meant for use by clients that repeat a connection attempt with a downgraded protocol (perform a "fallback retry") in order to work around interoperability problems with legacy servers.
I read on various forums regarding POODLE vulnerability in SSLv3. It is recommended to disable SSLv3 and support TLS_FALLBACK_SCSV on servers.
How to enable support of TLS_FALLBACK_SCSV on apache2.2?
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With