Apache-修補SSlv3 以及其他漏洞

SSLProtocol all -SSLv2 -SSLv3

SSLHonorCipherOrder on

 

Configure without RC4

Use this configuration if you have a preference for GCM (Galois Counter Mode) suites (these suites are resistant to timing attacks) and you prefer not to use RC4. To improve performance, use the faster ECDHE suites whenever possible.

 

SSLCipherSuite "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4"

 

用namp可以測看看 

nmap --script ssl-cert,ssl-enum-ciphers -p 443 127.0.0.1 | grep RC4
 

或上SSL檢測

https://www.ssllabs.com/ssltest