Server SSL configuration to stop warnings and errors

Discussion in 'Apache' started by Silver89, Jan 14, 2012.

  1. #1
    I've just setup SSL on the main domain in my whm/cpanel setup, the domain has it's own ip and is all up and running correctly.

    However when browsing the site in Chrome I get the following:

    I have checked the WHM > Server Configuration > Apache Configuration > Global Configuration

    and SSL Cipher Suite is set to the following, as recommended:

    ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP:!kEDH PCI recommended
    Code (markup):
    I also have the following SSL report: http://www.networking4all.com/en/su...t/?fqdn=https://mostplays.com/&protocol=https

    What is it that I'm doing wrong? are there any more settings that would help to diagnose the problem?
     
    Silver89, Jan 14, 2012 IP
  2. SolidShellSecurity

    SolidShellSecurity Banned

    Messages:
    262
    Likes Received:
    3
    Best Answers:
    1
    Trophy Points:
    45
    #2
    Edit the ssl.conf file
    root@server []# vi /usr/local/apache/conf/ssl.conf
    Edit the line
    from
    [h=3]SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL[/h] To
    SSLProtocol -SSLv2 +SSLv3 +TLSv1
    SSLCipherSuite !NULL:!ADH:!EXP:!LOW:SSLv3:+HIGH:+MEDIUM

    root@server []# /etc/init.d/httpd restart
     
    SolidShellSecurity, Jan 15, 2012 IP
    Silver89 likes this.
  3. Silver89

    Silver89 Notable Member

    Messages:
    2,243
    Likes Received:
    72
    Best Answers:
    0
    Trophy Points:
    205
    #3
    Brilliant, the above actually worked! Although for me the file was httpd.conf with an apache restart.
     
    Silver89, Jan 15, 2012 IP