Bug#1109839: apache2: in ssl.conf, SSLProtocol has a duplicate "all"
On 2025-07-31 00:00:00 -0500, Daniel Lewart wrote:
> A better patch is in Message #31 of the following:
> #943415 - apache2: Disable TLS 1.0 and 1.1 by default:
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=943415
This patch also changes SSLCipherSuite and SSLOpenSSLConfCmd,
which may be too much (unless the default is insecure).
--
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / Pascaline project (LIP, ENS-Lyon)
Reply to: