Posts tagged How to enable SSL3.0 on cpanel server

How to enable SSL3.0 on cpanel server

SSL stands for Secure Sockets Layer that provide’s security for communications over networks such as the Internet.
SSL encrypt’s the segments of network connections at the Application Layer to ensure the secure end-to-end transit at the Transport Layer.
In other words SSL is used for secure transactions and for secure transactions you need to enable SSL3.0 on your server.
You can enable SSL3.0 on your server by following the below steps :

Edit the SSL configuration file

root@server [#] vi /usr/local/apache/conf/ssl.conf

And then replace the line :

SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

With

SSLProtocol -SSLv2 +SSLv3 +TLSv1
SSLCipherSuite !NULL:!ADH:!EXP:!LOW:SSLv3:+HIGH:+MEDIUM

Then restart the Apache service

root@server[#] /etc/init.d/httpd restart

And to test if SSLv3 is enable on the server run the below command :

root@server[#] openssl s_client -connect hostname:443

Or

root@server[#] cat /usr/local/apache/conf/httpd.conf | grep -i sslciphersuite

It will show the output as :

# SSLCipherSuite can be set in WHM under ‘Apache Global Configuration’
SSLCipherSuite !NULL:!ADH:!EXP:!LOW:SSLv3:+HIGH:+MEDIUM

And if you want to enable it through WHM then you can enable it from WHM >> Service Configuration >> Apache Configuration >> Global Configuration

and add the code at “SSLCipherSuite” section.

!NULL:!ADH:!EXP:!LOW:SSLv3:+HIGH:+MEDIUM

and then click on the “save” button and then click on the “Rebuild Configuration And Restart Apache” button.

That’s all you are done.