Bug#1109839: apache2: in ssl.conf, SSLProtocol has a duplicate "all"
Vincent Lefevre <[email protected]> Thu, 31 Jul 2025 10:37:33 +0200
| Newsgroups | gmane.linux.debian.devel.apache |
|---|---|
| Message-ID | <20250731083733.GG2576__48134.7659415164$1753951166$gmane$org@qaa.vinc17.org> |
On 2025-07-31 00:00:00 -0500, Daniel Lewart wrote: > A better patch is in Message #31 of the following: > #943415 - apache2: Disable TLS 1.0 and 1.1 by default: > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=943415 This patch also changes SSLCipherSuite and SSLOpenSSLConfCmd, which may be too much (unless the default is insecure).