Hello, everyone. Nice to meet you.
SSL Server Test: www.digitura.biz (Powered by Qualys SSL Labs)
I have a trouble because of RC4 in my apache server in centos.
Apache 2.4.6
OpenSSL 1.0.2
SSLProtocol ALL -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 +TLSv1.2
SSLHonorCipherOrder On
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4
SSLCompression off
Here is the content of my httpd.conf file about this problem.
Please help me.
Thanks and Warm Regards.
Nailed it. You need to edit the SSLCipherSuite line in /etc/httpd/conf.d/ssl.conf instead of the one in /etc/httpd/httpd.conf.
On CentOS, Amazon Linux and many other distributions, you're not supposed to make any changes to /etc/httpd/httpd.conf.