commit 41b1bfca0e7de8009561b795601d067ff29f7627
Author: Stephen Wadeley <swadeley(a)redhat.com>
Date: Wed Oct 28 09:51:37 2015 +0100
Removing unnecessary procedure
This procedure "Disable All SSL and TLS Protocols Except TLS 1 and Up"
is, as written, functionally the same as the previous procedure. However,
is has the disadvantage of preventing newer TLS versions from being
used.
Thank you to Tomas Mraz for his review.
en-US/The_Apache_HTTP_Server.xml | 40 --------------------------------------
1 files changed, 0 insertions(+), 40 deletions(-)
---
diff --git a/en-US/The_Apache_HTTP_Server.xml b/en-US/The_Apache_HTTP_Server.xml
index 139ca52..eea8c3a 100644
--- a/en-US/The_Apache_HTTP_Server.xml
+++ b/en-US/The_Apache_HTTP_Server.xml
@@ -4012,46 +4012,6 @@ This step is particularly important if you have more than the one default Virtua
</procedure>
-<procedure id="proc-Disable_All_SSL_and_TLS_Except_TLS1_and_Up">
-<title>Disable All SSL and TLS Protocols Except TLS 1 and Up</title>
-<para>
- To disable all SSL and TLS protocol versions except TLS version 1 and higher, proceed as follows:
-</para>
-<step>
- <para>
- As <systemitem class="username">root</systemitem>, open the <filename>/etc/httpd/conf.d/ssl.conf</filename> file and search for <emphasis role="bold">all</emphasis> instances of <command>SSLProtocol</command> directive. By default the file contains one section that looks as follows:
- <screen>~]# <command>vi /etc/httpd/conf.d/ssl.conf</command>
-# SSL Protocol support:
-# List the enable protocol levels with which clients will be able to
-# connect. Disable SSLv2 access by default:
-SSLProtocol all -SSLv2</screen>
- </para>
-</step>
-<step>
- <para>
- Edit the <command>SSLProtocol</command> line as follows:
- <screen># SSL Protocol support:
-# List the enable protocol levels with which clients will be able to
-# connect. Disable SSLv2 access by default:
-SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2</screen>
- </para>
-</step>
-<step>
- <para>
- Verify the change as follows:
- <screen>~]# <command>grep SSLProtocol /etc/httpd/conf.d/ssl.conf </command>
-<emphasis role="bold">SSLProtocol</emphasis> -All +TLSv1 +TLSv1.1 +TLSv1.2</screen>
- </para>
-</step>
-<step>
- <para>
- Restart the Apache daemon as follows:
- <screen>~]# <command>service httpd restart</command></screen>
- Note that any sessions will be interrupted.
- </para>
-</step>
-
-</procedure>
</section>
<section id="s3-apache-mod_ssl-keypair">