Server supports SSLv3, may be vulnerable to POODLE attack


You may get a warning/error showing that “Server supports SSLv3, may be vulnerable to POODLE attack. It is suggested to disable the SSLv3 protocol.” even you have a pad green lock on your browser URL bar.

SSLv3 is old and outdated. It is insecure and servers should disable SSLv3. To disable this, simply add the following or alter the line with:

SSLProtocol All -SSLv2 -SSLv3

In the Apache2 file /etc/apache2/apache2.conf

Test and Restart the server:

sudo apache2ctl configtest && sudo service apache2 restart

And all warnings should go away.

GD Star Rating
loading...
126 words
Last Post: Processing Example - Simple Particles
Next Post: How to Connect to Monitor using USB on Nokia Lumia 635 Smart Phone?

The Permanent URL is: Server supports SSLv3, may be vulnerable to POODLE attack

Leave a Reply