<?xml version="1.0" encoding="UTF-8"?>

<rss version="2.0"
 xmlns:blogChannel="http://backend.userland.com/blogChannelModule"
>

<channel>
<title>Parallels knowledgebase (KB)</title>
<link>http://kb.parallels.com/</link>
<description>Parallels knowledgebase (KB)</description>
<language>en</language>
<copyright>Copyright 2008 Parallels</copyright>
<pubDate>Wed, 10 Sep 2008 00:00:00 +0600</pubDate>
<lastBuildDate>Wed, 10 Sep 2008 00:00:00 +0600</lastBuildDate>
<webMaster>rt-team@parallels.com</webMaster>

<item>
<title><![CDATA[[Info] How can I ensure that Apache does not allow SSL 2.0 protocol that has known weaknesses?]]></title>
<link>http://kb.parallels.com/en/1763</link>
<description><![CDATA[<div id="article">
	




	<div id="kb" class="kb">
		<div class="article-container">
			<h2 class="title">[Info] How can I ensure that Apache does not allow SSL 2.0 protocol that has known weaknesses?</h2>
			<div class="ab-frame"><div class="bl"><div class="br"><div class="tl"><div class="tr"><!-- frame -->
				<div class="articleProperty">
					<div>Article ID: 1763&nbsp;</div>
					<div>Last Review: Dec,24 2008</div>
					<tr>
						<td>Author: </td>
						<td>Dmitry Frantsev</td>
					</tr>
					<br/>
					<tr>
						<td>Last updated by: </td>
						<td>system</td>
					</tr>
					<strong>APPLIES TO:</strong>
					<div class="articleApplies">
						<ul>
							<li>Parallels Plesk Panel for Linux/Unix</li>
						</ul>
					</div>
				</div><!-- articleProperty -->
			</div></div></div></div></div><!-- frame -->

			<div class="article-internal-flag"></div>

			<div id="article-content">
				<div class="article-part">
					<h2>Resolution</h2>
					<p><strong>SYNOPSIS:</strong></p><p>I get the warning in my server security report:&nbsp;</p><p>The remote service encrypts traffic using a protocol with known weaknesses. Description : The remote service accepts connections encrypted using SSL 2.0, which reportedly suffers from several cryptographic flaws and has been deprecated for several years. An attacker may be able to exploit these issues to conduct man-in-the-middle attacks or decrypt communications between the affected service and clients.</p><p>&nbsp;</p><p><strong>RESOLUTION:&nbsp;</strong></p>SSL protocols that are used by Apache can be set by means of &quot;SSLProtocol&quot; option. Please read more about the &quot;mod_ssl&quot; module configuration at <a href="http://kb.parallels.comhttp://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslprotocol">http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslprotocol</a>.<br />To disable SSL v.2 protocol you should modify the &quot;/etc/httpd/conf.d/ssl.conf&quot; or &quot;httpd.conf&quot;, add the line: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <strong>SSLProtocol all -SSLv2</strong>&nbsp;Restart Apache after configuration files modification.&nbsp;
				</div>
				<div class="article-part">
					<h2>Additional information</h2>
					&nbsp;Note, real path to Apache or SSL configuration files can be different depending on operation system installed. For more information about apache web server related paths please refer to <a href="http://kb.parallels.com../en/5440">http://kb.parallels.com/en/5440</a> article.
				</div>
			</div>
		</div><!-- article-container -->


			<br/><br/>

			<div id="SubscriptionLink24Article" class="subscriptionLink2">
<a href="http://kb.parallels.com/subscriptions/index.html?Type=Article&ArticleID=1763&ArticleLanguage=en&Product=&Category="><img src="http://kb.parallels.com/images/mail.png" width="15" height="15" alt="Subscription for changes to this article"></a>
<a href="http://kb.parallels.com/subscriptions/index.html?Type=Article&ArticleID=1763&ArticleLanguage=en&Product=&Category=">Subscription for changes to this article</a>

<script type="text/javascript">

$(document).ready(function() {
	$('#SubscriptionLink24Article a').each(function(){
		$(this).click(function(event) {
			event.preventDefault();
			MainPageContentHide();
			$('#subscription').html('');
			$.get('/Stuff/Subscription', {
													'Type' : 'Article',
													'ArticleID' : '1763',
													'ArticleLanguage' : 'en',
													'Product' : '',
													'Category' : ''
												}, function(data) {
																	$('#subscription').html(data);
																	$('#subscription').show();
																	SUBbuildsubmenus_product();
																});
		});
	});
});

</script>

</div>





	</div><!-- kb -->

</div><!-- article -->


]]></description>
<author>Dmitry Frantsev</author>
<guid isPermaLink="false">1401 LastUpdated: 2008-12-24 13:49:37</guid>
<pubDate>2007-03-27 02:44:48</pubDate>
</item>
</channel>
</rss>



