Bug#951067: apache2: unable to disable TLSv1

2021-04-22 Thread MichaIng
I think "all" cannot be used like that. From the docs: https://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslprotocol "all" is an alias for "+SSLv3 +TLSv1 +...", so while the raw config file syntax is fine, internally "-all" is probably seen as invalid and replaced by the default

Bug#951067: apache2: unable to disable TLSv1

2020-02-10 Thread Olaf Zaplinski
Package: apache2 Version: 2.4.38-3+deb10u3 Severity: important Dear Maintainer, it is not possible to get rid of TLS v1. This is no duplicate of #925061, I think. What I tried: removed /etc/letsencrypt/options-ssl-apache.conf, see #950735 edited /etc/apache2/mods-enabled/ssl.conf: