Configuring Apache 1.3 to use SSL v3 instead of v2

Harlin · 06-06-2006, 08:16 AM

Please excuse me if I have put this in the wrong section. But I am wondering how can I configure Apache 1.3 (Using 1.3.28) to use SSL version 3 instead of the default version 2? Any help on this would be appreciated. I am using Redhat Enterprise 4.

Thanks,

Harlin

bathory · 06-07-2006, 02:51 AM

By default mod_ssl support either SSLv2 and SSLv3 (it also supports TLSv1). It's the browser that must support the wanted SSL version (most browsers support both SSL v1 and v2 but not TLSv1 yet).
You can control the protocol version you give to the clients connected to your server using the SSLProtocol directive.

Regards

Harlin · 06-07-2006, 05:43 AM

Hi Bathory,

Thanks for the help. I found another 1.3 directive called SSHVersion. With this you can do something like:

Code:

SSHVersion SSLV3

... and Bob's your uncle.

At any rate, the trick to this directive is that it must be placed in a particular directory besides the RootDocument directory else you get all kinds of headaches. This is perhaps a bit different but without your suggestion, I would have been barking up the wrong tree for quite a while more.

Thanks,

Harlin