Enabling only TLS1.2 on Ubuntu 16.04 w/ Apache 2.4How to disable TLS 1.1 & 1.2 in Apache?Internet...
I can't die. Who am I?
When was drinking water recognized as crucial in marathon running?
What type of postprocessing gives the effect of people standing out
CBP Reminds Travelers to Allow 72 Hours for ESTA. Why?
Difference between 'stomach' and 'uterus'
A "strange" unit radio astronomy
How to kill a localhost:8080
Compare four integers, return word based on maximum
Is there a frame of reference in which I was born before I was conceived?
Non-Italian European mafias in USA?
What is a term for a function that when called repeatedly, has the same effect as calling once?
Did Amazon pay $0 in taxes last year?
How to count occurrences of Friday 13th
Which aircraft had such a luxurious-looking navigator's station?
How to mitigate "bandwagon attacking" from players?
Must a tritone substitution use a dominant seventh chord?
Whom do I have to contact for a ticket refund in case of denied boarding (in the EU)?
Called into a meeting and told we are being made redundant (laid off) and "not to share outside". Can I tell my partner?
I encountered my boss during an on-site interview at another company. Should I bring it up when seeing him next time?
What is the difference between ashamed and shamed?
Where is the fallacy here?
What if I store 10TB on azure servers and then keep the vm powered off?
Is divide-by-zero a security vulnerability?
Is the set of paths between any two points moving only in units on the plane countable or uncountable?
Enabling only TLS1.2 on Ubuntu 16.04 w/ Apache 2.4
How to disable TLS 1.1 & 1.2 in Apache?Internet Explorer 8 - TLS Fatal Error Close Notify - Oracle HTTP - Server Apache 2.2.22.0Does SNI really require TLSv1 (insecure)?Unable to turn off SSLv3 on Apache 2.4.9 without losing TLS 1.1 and 1.2How to Make JBoss 5.1.0 GA Meet Diffie-Hellman Standards?Turn off TLS1.0 on Apache for PCI complianceHow to disable TLSv1 and enable TLSv1.2 in apache 2.2.29Apache SSL Varnish ERR_TOO_MANY_REDIRECTSDisabling weak protocols and ciphers in Centos with ApacheNot able to disable tls 1.1 for nginx
I am trying to enable ONLY TLS 1.2 on Ubuntu 16.04 with Apache 2.4. I have read other similar questions, but the implementations in them do not work here.
Currently TLS 1, 1.1, and 1.2 are enabled. No matter how I change my /etc/apache2/mods-enabled/ssl.conf
(I also changed the one under mods-available
), and the enabled protocols do not change when testing.
I've tried all sorts of configs, including:
SSLProtocol TLSv1.2
SSLProtocol all -TLSv1 -TLSv1.1 -SSLv3
SSLProtocol TLSv1.1 TLSv1.2
I've also restarted the apache service, even restarted the device as well. And verified the config via apache2ctl -t
.
Why is this? How can I disable these? Is there some other config location?
Note: There are no other ssl.conf
on the system, only the ones under the apache2
directory where found via find
.
ubuntu ssl apache-2.4 openssl apache2
add a comment |
I am trying to enable ONLY TLS 1.2 on Ubuntu 16.04 with Apache 2.4. I have read other similar questions, but the implementations in them do not work here.
Currently TLS 1, 1.1, and 1.2 are enabled. No matter how I change my /etc/apache2/mods-enabled/ssl.conf
(I also changed the one under mods-available
), and the enabled protocols do not change when testing.
I've tried all sorts of configs, including:
SSLProtocol TLSv1.2
SSLProtocol all -TLSv1 -TLSv1.1 -SSLv3
SSLProtocol TLSv1.1 TLSv1.2
I've also restarted the apache service, even restarted the device as well. And verified the config via apache2ctl -t
.
Why is this? How can I disable these? Is there some other config location?
Note: There are no other ssl.conf
on the system, only the ones under the apache2
directory where found via find
.
ubuntu ssl apache-2.4 openssl apache2
Did you defineSSLProtocol
somewhere else?
– Michael Hampton♦
3 hours ago
I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search forSSLProtocol
and see what comes up?
– Douglas Gaskell
2 hours ago
Found it,/etc/letsencrypt/options-ssl-apache.conf
used by/etc/apache2/mods-enabled/000-default-le-ssl.conf
– Douglas Gaskell
1 hour ago
add a comment |
I am trying to enable ONLY TLS 1.2 on Ubuntu 16.04 with Apache 2.4. I have read other similar questions, but the implementations in them do not work here.
Currently TLS 1, 1.1, and 1.2 are enabled. No matter how I change my /etc/apache2/mods-enabled/ssl.conf
(I also changed the one under mods-available
), and the enabled protocols do not change when testing.
I've tried all sorts of configs, including:
SSLProtocol TLSv1.2
SSLProtocol all -TLSv1 -TLSv1.1 -SSLv3
SSLProtocol TLSv1.1 TLSv1.2
I've also restarted the apache service, even restarted the device as well. And verified the config via apache2ctl -t
.
Why is this? How can I disable these? Is there some other config location?
Note: There are no other ssl.conf
on the system, only the ones under the apache2
directory where found via find
.
ubuntu ssl apache-2.4 openssl apache2
I am trying to enable ONLY TLS 1.2 on Ubuntu 16.04 with Apache 2.4. I have read other similar questions, but the implementations in them do not work here.
Currently TLS 1, 1.1, and 1.2 are enabled. No matter how I change my /etc/apache2/mods-enabled/ssl.conf
(I also changed the one under mods-available
), and the enabled protocols do not change when testing.
I've tried all sorts of configs, including:
SSLProtocol TLSv1.2
SSLProtocol all -TLSv1 -TLSv1.1 -SSLv3
SSLProtocol TLSv1.1 TLSv1.2
I've also restarted the apache service, even restarted the device as well. And verified the config via apache2ctl -t
.
Why is this? How can I disable these? Is there some other config location?
Note: There are no other ssl.conf
on the system, only the ones under the apache2
directory where found via find
.
ubuntu ssl apache-2.4 openssl apache2
ubuntu ssl apache-2.4 openssl apache2
asked 4 hours ago
Douglas GaskellDouglas Gaskell
14716
14716
Did you defineSSLProtocol
somewhere else?
– Michael Hampton♦
3 hours ago
I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search forSSLProtocol
and see what comes up?
– Douglas Gaskell
2 hours ago
Found it,/etc/letsencrypt/options-ssl-apache.conf
used by/etc/apache2/mods-enabled/000-default-le-ssl.conf
– Douglas Gaskell
1 hour ago
add a comment |
Did you defineSSLProtocol
somewhere else?
– Michael Hampton♦
3 hours ago
I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search forSSLProtocol
and see what comes up?
– Douglas Gaskell
2 hours ago
Found it,/etc/letsencrypt/options-ssl-apache.conf
used by/etc/apache2/mods-enabled/000-default-le-ssl.conf
– Douglas Gaskell
1 hour ago
Did you define
SSLProtocol
somewhere else?– Michael Hampton♦
3 hours ago
Did you define
SSLProtocol
somewhere else?– Michael Hampton♦
3 hours ago
I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search for
SSLProtocol
and see what comes up?– Douglas Gaskell
2 hours ago
I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search for
SSLProtocol
and see what comes up?– Douglas Gaskell
2 hours ago
Found it,
/etc/letsencrypt/options-ssl-apache.conf
used by /etc/apache2/mods-enabled/000-default-le-ssl.conf
– Douglas Gaskell
1 hour ago
Found it,
/etc/letsencrypt/options-ssl-apache.conf
used by /etc/apache2/mods-enabled/000-default-le-ssl.conf
– Douglas Gaskell
1 hour ago
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f956756%2fenabling-only-tls1-2-on-ubuntu-16-04-w-apache-2-4%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f956756%2fenabling-only-tls1-2-on-ubuntu-16-04-w-apache-2-4%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Did you define
SSLProtocol
somewhere else?– Michael Hampton♦
3 hours ago
I don't believe I did, this is a fresh instance on EC2. The only place I could find the configuration was where I listed it above. If there is a way to do a global filesearch including contents I can search for
SSLProtocol
and see what comes up?– Douglas Gaskell
2 hours ago
Found it,
/etc/letsencrypt/options-ssl-apache.conf
used by/etc/apache2/mods-enabled/000-default-le-ssl.conf
– Douglas Gaskell
1 hour ago