SSLCipherSuite - disable weak encryption, cbc cipher and md5 based algorithm
- by John
A developer recently ran a PCI Scan with TripWire against our LAMP server. They identified several issues and instructed the following to correct the issues:
Problem: SSL Server Supports Weak Encryption for SSLv3, TLSv1,
Solution: Add the following rule to httpd.conf
SSLCipherSuite ALL:!aNULL:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
Problem:…