TLS 1.2

Virtualmin
1

Hello,

I have 2 VPS’s running both the same Debian Wheezy, same Virtualmin, same Apache 2.2.22, same OpenSSL 1.0.1e, pretty much the same eveything (besides virtual servers), both up to date. When using the Qualys SSL Labs tests, one server gets B because it does not support TLS v1.1 and 1.2 while the other gets an A because it does …

I already spent almost 2 hours trying to find a difference … /etc/apache2/mods-enabled/ssl.conf is the same, in fact a copy-paste from the one that gets the B to the one that gets the A … so I guess the pbm is elsewhere.

An idea where I should look ? The B one was installed like a year ago, the A just recently.

Also, I’m using valid certs from StarSSL on both servers.

Pierre.

2

Howdy,

You may want to grep through your entire Apache config for anything that might be setting either SSLProtocol or SSLCipherSuite, as both of those could cause what you’re describing.

-Eric

3

Hello,

Thank you Eric, right on spot as usual :slight_smile: I had some declarations (+TLSv1 only) in virtualhosts configuration that were overwriting the general configuration (all -SSLv2 -SSLv3).
Both servers are now graded A, cool !

P.