apache httpd – How to disable TLSv1.2 in my CENTOS based system – Unix & Linux Stack Exchange
I want to disable TLSv1.2 in my centOS based RHEL system. I don’t have a lot of knowledge of server management or security protocols, but the VAPT report says that we need to close TLSv1.2.
i have two files to modify, httpd.conf and ssl.conf, both of which has SSLProtocol in them. For reference , i have pasted here.
SSL.conf:
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.2 +TLSv1.3
SSLProxyCipherSuite PROFILE=SYSTEM
httpd.conf
ServerName XYZZZ.in
SSLEngine On
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.2 +TLSv1.3
Header always set Permissions-Policy "interest-cohort=()"
Redirect permanent / XYZ.in
The above mentioned code is still not helping. TLSv1.2 is still enabled. I am using sslscan.exe to check. Please help if you know the solution.
Read more here: Source link

