Normally I use mod_ssl, so to turn off the less desirable SSLv2 I use the following directive: SSLProtocol +SSLv3 +TLSv1 Now, I'm giving the Debian Apache-Ssl package a try. Is there any equivalent directive? Thanks! - Scott