{"id":199,"date":"2020-03-24T18:09:07","date_gmt":"2020-03-24T18:09:07","guid":{"rendered":""},"modified":"2023-07-02T23:12:32","modified_gmt":"2023-07-02T23:12:32","slug":"disable-ssl2-ssl3-sentora-centos","status":"publish","type":"post","link":"https:\/\/abruptlycreative.com\/index.php\/2020\/03\/24\/disable-ssl2-ssl3-sentora-centos\/","title":{"rendered":"How to Disable SSLv2 &#038; SSLv3 Protocols"},"content":{"rendered":"\n<p class=\"has-text-align-center\"><img decoding=\"async\" class=\"wp-image-981\" style=\"width: 500px;\" src=\"https:\/\/abruptlycreative.com\/wp-content\/uploads\/2020\/03\/SSLLABS-A.jpg\" alt=\"SSL Labs A Score\"><\/p>\n\n\n\n<p>I&#8217;m attempting to detach my husband&#8217;s company portal from its main website.  For several years we&#8217;ve used <a href=\"https:\/\/www.dynadot.com\/\">Dynadot<\/a> as our hosting provider.  Unfortunately, Dynadot only offer VPS (Virtual Private Servers) and is no longer offering advanced hosting for purchase.  I&#8217;ve familarized myself with CPanel over the years, but this my first experience with <a href=\"http:\/\/www.sentora.org\/\">Sentora<\/a> and <a href=\"https:\/\/www.centos.org\/\">CentOS<\/a>.  My first major hurdle was disabiling SSLv2 and SSLv3.<\/p>\n\n\n\n<p>I stubbled upon <a href=\"https:\/\/www.ssllabs.com\/\">SSL Labs<\/a> after adding a <a href=\"https:\/\/letsencrypt.org\/\">Let&#8217;s Encrypt<\/a> certificate to my site when <a href=\"https:\/\/certbot.eff.org\/\">CertBot<\/a> suggested using SSL Labs to confirm my site was secure after install.  <a href=\"https:\/\/www.ssllabs.com\/\">SSL Labs<\/a> is an amazing resource to evaluate your website&#8217;s security.  This is where I learned SSLv2 &amp; SSLv3 are outdated and increase your websites vulnerability.  That&#8217;s the extent of my knowledge so you&#8217;ll have to ask Google if you want to learn more.<\/p>\n\n\n\n<p>I&#8217;m quickly learning Sentora&#8217;s documentation is outdated and finding a solution to any Sentora\/CentOS6 issue through Google searches is a daunting task. So I wanted to share how I disabled SSLv2 and SSLv3 in a Sentora\/CentOS6\/Apache environment.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-css-opacity\"\/>\n\n\n\n<h4 class=\"wp-block-heading\">First, install your SSL\/TLS certificate.<\/h4>\n\n\n\n<p>You can install a free SSL\/TLS Certificate from Let&#8217;s Encrypt.  In this tutorial, you <strong>easily<\/strong> (no thanks to Sentora) install a Let&#8217;s Encrypt Certificate on the Sentora\/CentOS6\/Apache environment.  I can&#8217;t speak for other environments, but perhaps you&#8217;ll find a tip in the tutorial.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Next, edit the Virtual Host file. <\/h4>\n\n\n\n<div class=\"su-note\"  style=\"border-color:#cdafa9;border-radius:11px;-moz-border-radius:11px;-webkit-border-radius:11px;\"><div class=\"su-note-inner su-u-clearfix su-u-trim\" style=\"background-color:#e7c9c3;border-color:#ffffff;color:#513f3b;border-radius:11px;-moz-border-radius:11px;-webkit-border-radius:11px;\">I use <a href=\"https:\/\/winscp.net\/eng\/index.php\" target=\"blank\" rel=\"noopener noreferrer\">WinSCP<\/a> to SSH into my files.<\/div><\/div>\n\n\n\n<p>Locate the ssl.conf file at root\/etc\/httpd\/conf.d\/ssl.conf<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Edit the default SSLCipherSuite:<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Edit SSLProtocol:<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>SSLProtocol All -SSLv2 -SSLv3<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\">Add SSLHonorCipherOrder:<\/h4>\n\n\n\n<pre class=\"wp-block-code\"><code>SSLHonorCipherOrder On<\/code><\/pre>\n\n\n\n<p>Special thanks to <a href=\"https:\/\/linux.jadoel.info\/\">Idroot<\/a> for providing the <em>How to Install Let&#8217;s Encrypt SSL with Apache on CentOS 7<\/em> tutorial.  The tutorial was written for CentOS7 and was entirely compatiable with my system.  However, I was relieved to finally disable SSLv2 and SSLv3 using a portion of the code in Step 3 that I shared above.  Adding any additional code from Step 3 upset my system, but the above seems to be the perfect solution.  My site&#8217;s SSL Lab rating is now an <strong>A<\/strong>!  I&#8217;m happy!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>How to easily disable SSLv2 and SSLv3 Protocols in a VPS (Virtual Private Server) Sentora \/ CentOS6 \/ Apache environment.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"wprm-recipe-roundup-name":"","wprm-recipe-roundup-description":""},"categories":[55],"tags":[58,57,60,59],"_links":{"self":[{"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/posts\/199"}],"collection":[{"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/comments?post=199"}],"version-history":[{"count":1,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/posts\/199\/revisions"}],"predecessor-version":[{"id":289,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/posts\/199\/revisions\/289"}],"wp:attachment":[{"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/media?parent=199"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/categories?post=199"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/abruptlycreative.com\/index.php\/wp-json\/wp\/v2\/tags?post=199"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}