Apache 2.4 OpenSSL – How to Disable Everything but TLSv1.2 on Ubuntu 16.04

apache-2.4opensslubuntu-16.04

i am having a little issue with my Server. I want to Disable tlsv1 and tlsv1.1 but… My settings don't take hold. I specified the protocols in mod_ssl and tried to set them in the openssl config file, but to no avail.

Here are some configuration excerpts with hope that someone can point me to a solution. It's driving me nuts…

apache2/mods-available/ssl.conf
SSLProtocol             all -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2
SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256

If more information are required, do not hesitate to ask.

Best regards!

Best Answer

Try: SSLProtocol -all +TLSv1.2