[Koha-bugs] [Bug 34193] Default HTTPS template has outdated SSLProtocol value

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Tue Jul 4 01:51:07 CEST 2023


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34193

--- Comment #1 from David Cook <dcook at prosentient.com.au> ---
We want to go with the following:
SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 

This has the effect of enabling all the modern versions and then selectively
disabling the deprecated versions.

Despite what is stated on the Apache website, "all" stands for ''+SSLv3 +TLSv1
+TLSv1.1 +TLSv1.2 +TLSv1.3''

-- 
You are receiving this mail because:
You are watching all bug changes.


More information about the Koha-bugs mailing list