Showing false result

Hi All,

I am running CentOS 7 on my web server. reports are showing me SSLv3 protocol supported.

my ssl.conf is as below

SSLProtocol -all +TLSv1.2 -SSLv3 -SSLv2
SSLHonorCipherOrder on

Please let me know if any changes are required in configuration or its false positive?


I don´t know what software you use, but i guess your string is wrong. Did you verified it with " openssl s_client -connect your_host:port and disable the unwanted Protocols " or scanssl ?

1 Like