Disabling SSL 2.0 and 3.0 on Apache Web Agent

Products

• SITEMINDER
• CA Single Sign On Agents (SiteMinder)

Issue/Introduction

 

When running Web Agent on Apache, how to disable SSL 2.0 and 3.0 on
Apache ?

 

Resolution

 

At first glance, as the SSL layer is outside Web Agent, and strictly related to Apache. So there's no impact on Web Agent as long as Apache can serve the SSL / TLS connections.

Contact the Linux vendor to get the exact step to disable SSL 2.0 and 3.0.

Some pages found over internet give indication how to disable SSL 2.0 and 3.0 (1)(2)(3).

Another resource in internet gives path to enable TLS 1.2 on Apache (4). Consult Apache or Support from the vendor providing Apache to enable it.

 

Additional Information

 

(1)

    Apache - Disable SSL 2.0 and SSL 3.0
    https://www.kinamo.be/en/support/faq/apache-disable-ssl-v2-and-ssl-v3

(2)
  
    Apache: Disabling the SSL v3 Protocol
    https://www.digicert.com/kb/ssl-support/apache-disabling-ssl-v3.htm

(3)
  
    How to disable outdated versions of SSL/TLS in Apache
    https://www.leaderssl.com/news/471-how-to-disable-outdated-versions-of-ssl-tls-in-apache

(4)

    How to enable TLS 1.1 and 1.2 with OpenSSL and Apache

      TLS1.2 is now available for apache, to add TLSs1.2 you just need
      to add in your https virtual host configuration:

    https://serverfault.com/questions/314858/how-to-enable-tls-1-1-and-1-2-with-openssl-and-apache