On Red Hat / CentOS based systems: /etc/httpd/conf/nf On Debian / Ubuntu based systems: /etc/apache2/nf

The default Apache configuration file can be found: Disabling SSLv2, SSLv3, TLSv1, and TLSv1.1ĭepending on your configuration, this may need to be changed in multiple locations. For this reason, you should disable SSLv2, SSLv3, TLS 1.0 and TLS 1.1 in your server configuration, leaving only TLS protocols 1.2 and 1.3 enabled. Over the years vulnerabilities have been and continue to be discovered in the deprecated SSL and TLS protocols. This is also where a server will provide its digital certificate to a connecting client. During this handshake the client and server will work out what mutual ciphers and hash algorithms are supported. A 'handshake' is done at the start of a TLS or SSL connection. Introduction Secure Socket Layer (SSL) and Transport Layer Security (TLS) are both cryptographic protocols providing communication security over a network for example a client connecting to a web server.

Apache tomcat 8 enable ssl