apache httpd – How to disable TLSv1.2 in my CENTOS based system – Unix & Linux Stack Exchange

issue description

I want to disable TLSv1.2 in my centOS based RHEL system. I don’t have a lot of knowledge of server management or security protocols, but the VAPT report says that we need to close TLSv1.2.
i have two files to modify, httpd.conf and ssl.conf, both of which has SSLProtocol in them. For reference , i have pasted here.

SSL.conf:


SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.2 +TLSv1.3
SSLProxyCipherSuite PROFILE=SYSTEM

httpd.conf


ServerName XYZZZ.in
SSLEngine On
SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 -TLSv1.2 +TLSv1.3
Header always set Permissions-Policy "interest-cohort=()"
Redirect permanent / XYZ.in

The above mentioned code is still not helping. TLSv1.2 is still enabled. I am using sslscan.exe to check. Please help if you know the solution.

Read more here: Source link