SSLProtocol Directive

Specifies SSL protocol(s) for mod_ossl to use when establishing the server environment. Clients can only connect with one of the specified protocols. Accepted values are:

  • TLSv1

  • TLSv1.1

  • TLSv1.2

  • All

Note:

SSLv3 is disabled in Release 12.2.1.

You can specify multiple values as a space-delimited list. In the syntax, the "-" and "+" symbols have the following meaning:

  • + : Adds the protocol to the list

  • - : Removes the protocol from the list

In the current release All is defined as +TLSv1 +TLSv1.1 +TLSv1.2.

Category Value

Syntax

SSLProtocol [+-] TLSv1 | TLSv1.1 | TLSv1.2 | All

Example

SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2

Default

ALL