Enabling only TLS1.2 on Ubuntu 16.04 w/ Apache 2.4How to disable TLS 1.1 & 1.2 in Apache?Internet...

I can't die. Who am I?

When was drinking water recognized as crucial in marathon running?

What type of postprocessing gives the effect of people standing out

CBP Reminds Travelers to Allow 72 Hours for ESTA. Why?

Difference between 'stomach' and 'uterus'

A "strange" unit radio astronomy

How to kill a localhost:8080

Compare four integers, return word based on maximum

Is there a frame of reference in which I was born before I was conceived?

Non-Italian European mafias in USA?

What is a term for a function that when called repeatedly, has the same effect as calling once?

Did Amazon pay $0 in taxes last year?

How to count occurrences of Friday 13th

Which aircraft had such a luxurious-looking navigator's station?

How to mitigate "bandwagon attacking" from players?

Must a tritone substitution use a dominant seventh chord?

Whom do I have to contact for a ticket refund in case of denied boarding (in the EU)?

Called into a meeting and told we are being made redundant (laid off) and "not to share outside". Can I tell my partner?

I encountered my boss during an on-site interview at another company. Should I bring it up when seeing him next time?

What is the difference between ashamed and shamed?

Where is the fallacy here?

What if I store 10TB on azure servers and then keep the vm powered off?

Is divide-by-zero a security vulnerability?

Is the set of paths between any two points moving only in units on the plane countable or uncountable?



Enabling only TLS1.2 on Ubuntu 16.04 w/ Apache 2.4


How to disable TLS 1.1 & 1.2 in Apache?Internet Explorer 8 - TLS Fatal Error Close Notify - Oracle HTTP - Server Apache 2.2.22.0Does SNI really require TLSv1 (insecure)?Unable to turn off SSLv3 on Apache 2.4.9 without losing TLS 1.1 and 1.2How to Make JBoss 5.1.0 GA Meet Diffie-Hellman Standards?Turn off TLS1.0 on Apache for PCI complianceHow to disable TLSv1 and enable TLSv1.2 in apache 2.2.29Apache SSL Varnish ERR_TOO_MANY_REDIRECTSDisabling weak protocols and ciphers in Centos with ApacheNot able to disable tls 1.1 for nginx













1















I am trying to enable ONLY TLS 1.2 on Ubuntu 16.04 with Apache 2.4. I have read other similar questions, but the implementations in them do not work here.



Currently TLS 1, 1.1, and 1.2 are enabled. No matter how I change my /etc/apache2/mods-enabled/ssl.conf (I also changed the one under mods-available), and the enabled protocols do not change when testing.



I've tried all sorts of configs, including:





  • SSLProtocol TLSv1.2

  • SSLProtocol all -TLSv1 -TLSv1.1 -SSLv3

  • SSLProtocol TLSv1.1 TLSv1.2


I've also restarted the apache service, even restarted the device as well. And verified the config via apache2ctl -t.



Why is this? How can I disable these? Is there some other config location?



Note: There are no other ssl.conf on the system, only the ones under the apache2 directory where found via find.










share|improve this question























  • Did you define SSLProtocol somewhere else?

    – Michael Hampton
    3 hours ago











  • I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search for SSLProtocol and see what comes up?

    – Douglas Gaskell
    2 hours ago











  • Found it, /etc/letsencrypt/options-ssl-apache.conf used by /etc/apache2/mods-enabled/000-default-le-ssl.conf

    – Douglas Gaskell
    1 hour ago
















1















I am trying to enable ONLY TLS 1.2 on Ubuntu 16.04 with Apache 2.4. I have read other similar questions, but the implementations in them do not work here.



Currently TLS 1, 1.1, and 1.2 are enabled. No matter how I change my /etc/apache2/mods-enabled/ssl.conf (I also changed the one under mods-available), and the enabled protocols do not change when testing.



I've tried all sorts of configs, including:





  • SSLProtocol TLSv1.2

  • SSLProtocol all -TLSv1 -TLSv1.1 -SSLv3

  • SSLProtocol TLSv1.1 TLSv1.2


I've also restarted the apache service, even restarted the device as well. And verified the config via apache2ctl -t.



Why is this? How can I disable these? Is there some other config location?



Note: There are no other ssl.conf on the system, only the ones under the apache2 directory where found via find.










share|improve this question























  • Did you define SSLProtocol somewhere else?

    – Michael Hampton
    3 hours ago











  • I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search for SSLProtocol and see what comes up?

    – Douglas Gaskell
    2 hours ago











  • Found it, /etc/letsencrypt/options-ssl-apache.conf used by /etc/apache2/mods-enabled/000-default-le-ssl.conf

    – Douglas Gaskell
    1 hour ago














1












1








1








I am trying to enable ONLY TLS 1.2 on Ubuntu 16.04 with Apache 2.4. I have read other similar questions, but the implementations in them do not work here.



Currently TLS 1, 1.1, and 1.2 are enabled. No matter how I change my /etc/apache2/mods-enabled/ssl.conf (I also changed the one under mods-available), and the enabled protocols do not change when testing.



I've tried all sorts of configs, including:





  • SSLProtocol TLSv1.2

  • SSLProtocol all -TLSv1 -TLSv1.1 -SSLv3

  • SSLProtocol TLSv1.1 TLSv1.2


I've also restarted the apache service, even restarted the device as well. And verified the config via apache2ctl -t.



Why is this? How can I disable these? Is there some other config location?



Note: There are no other ssl.conf on the system, only the ones under the apache2 directory where found via find.










share|improve this question














I am trying to enable ONLY TLS 1.2 on Ubuntu 16.04 with Apache 2.4. I have read other similar questions, but the implementations in them do not work here.



Currently TLS 1, 1.1, and 1.2 are enabled. No matter how I change my /etc/apache2/mods-enabled/ssl.conf (I also changed the one under mods-available), and the enabled protocols do not change when testing.



I've tried all sorts of configs, including:





  • SSLProtocol TLSv1.2

  • SSLProtocol all -TLSv1 -TLSv1.1 -SSLv3

  • SSLProtocol TLSv1.1 TLSv1.2


I've also restarted the apache service, even restarted the device as well. And verified the config via apache2ctl -t.



Why is this? How can I disable these? Is there some other config location?



Note: There are no other ssl.conf on the system, only the ones under the apache2 directory where found via find.







ubuntu ssl apache-2.4 openssl apache2






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked 4 hours ago









Douglas GaskellDouglas Gaskell

14716




14716













  • Did you define SSLProtocol somewhere else?

    – Michael Hampton
    3 hours ago











  • I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search for SSLProtocol and see what comes up?

    – Douglas Gaskell
    2 hours ago











  • Found it, /etc/letsencrypt/options-ssl-apache.conf used by /etc/apache2/mods-enabled/000-default-le-ssl.conf

    – Douglas Gaskell
    1 hour ago



















  • Did you define SSLProtocol somewhere else?

    – Michael Hampton
    3 hours ago











  • I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search for SSLProtocol and see what comes up?

    – Douglas Gaskell
    2 hours ago











  • Found it, /etc/letsencrypt/options-ssl-apache.conf used by /etc/apache2/mods-enabled/000-default-le-ssl.conf

    – Douglas Gaskell
    1 hour ago

















Did you define SSLProtocol somewhere else?

– Michael Hampton
3 hours ago





Did you define SSLProtocol somewhere else?

– Michael Hampton
3 hours ago













I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search for SSLProtocol and see what comes up?

– Douglas Gaskell
2 hours ago





I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search for SSLProtocol and see what comes up?

– Douglas Gaskell
2 hours ago













Found it, /etc/letsencrypt/options-ssl-apache.conf used by /etc/apache2/mods-enabled/000-default-le-ssl.conf

– Douglas Gaskell
1 hour ago





Found it, /etc/letsencrypt/options-ssl-apache.conf used by /etc/apache2/mods-enabled/000-default-le-ssl.conf

– Douglas Gaskell
1 hour ago










0






active

oldest

votes











Your Answer








StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});














draft saved

draft discarded


















StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f956756%2fenabling-only-tls1-2-on-ubuntu-16-04-w-apache-2-4%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown

























0






active

oldest

votes








0






active

oldest

votes









active

oldest

votes






active

oldest

votes
















draft saved

draft discarded




















































Thanks for contributing an answer to Server Fault!


  • Please be sure to answer the question. Provide details and share your research!

But avoid



  • Asking for help, clarification, or responding to other answers.

  • Making statements based on opinion; back them up with references or personal experience.


To learn more, see our tips on writing great answers.




draft saved


draft discarded














StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f956756%2fenabling-only-tls1-2-on-ubuntu-16-04-w-apache-2-4%23new-answer', 'question_page');
}
);

Post as a guest















Required, but never shown





















































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown

































Required, but never shown














Required, but never shown












Required, but never shown







Required, but never shown







Popular posts from this blog

As a Security Precaution, the user account has been locked The Next CEO of Stack OverflowMS...

Список ссавців Італії Природоохоронні статуси | Список |...

Українські прізвища Зміст Історичні відомості |...