Thursday 4 June 2015

Turning off SSL engine in Apache for CentOS

as-Salam.
Ini nota untuk diri sendiri :)


A. Turning off SSL engine in Apache for CentOS

1.  Edit ssl.conf  in /etc/httpd/conf.d/ssl.conf

2.  Find a line SSLEngine and turn it to off

# SSL Engine Switch:
# Enable/Disable SSL for this virtual host.
SSLEngine off

3.  Restart the Httpd Services

# service httpd restart

B.  To close SSL Port, COMMENT or REMARK LISTEN 443 in /etc/httpd/conf.d/ssl.conf

1.  Change from :
# When we also provide SSL we have to listen to the
# standard HTTP port (see above) and to the HTTPS port
#
Listen 443

change  to :
# When we also provide SSL we have to listen to the
# standard HTTP port (see above) and to the HTTPS port
#
# Listen 443
 
 2.  Restart the Httpd Services
# service httpd restart

3.  Check status

#service httpd status

ref :
http://linuxtoolkit.blogspot.com/2012/04/turning-off-ssl-engine-in-apache.html
http://centoshelp.org/security/apache-httpd-with-ssl-https-secure-socket-layer/
https://www.centos.org/forums/viewtopic.php?f=17&t=49029
http://unix.stackexchange.com/questions/162478/how-to-disable-sslv3-in-apache

No comments:

Post a Comment