Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

10
  • Could you use ssllabs.com/ssltest instead and verify. Commented Oct 20, 2014 at 13:37
  • @Braiam I just tested the above link and I'm still vulnerable. Commented Oct 20, 2014 at 13:45
  • Could you provide, the version of apache and a sanitinized copy of your httpd.conf files? Might be good also sudo apache2ctl configtest Commented Oct 20, 2014 at 13:48
  • @Braiam details added. Commented Oct 20, 2014 at 14:11
  • 1
    "put in the above line in every vhost stanza" I believe is true only if each vhosts has 'SSLProtocol' stated separately, which I believe is not true in your case. Could you check whether there are any other ssl.conf files on your server? Commented Oct 20, 2014 at 14:54