Check Apache weak SSL/TLS Ciphers (SSLCipherSuite)

[crazyaboutlinux]

we have installed csf firewall AND i have seen warning for Check Apache weak SSL/TLS Ciphers (SSLCipherSuite)

Cipher list []. Due to weaknesses in the SSLv2 cipher you should disable SSLv2 in WHM > Apache Configuration > Global Configuration > SSLCipherSuite > Add -SSLv2 to SSLCipherSuite and/or remove +SSLv2. Do not forget to Save AND then Rebuild Configuration and Restart Apache, otherwise the changes will not take effect in httpd.conf

Should we disable this option as mention above

we are using
cPanel 11.24.5-R37946
WHM 11.24.2 - X 3.9
CENTOS 5.3 i686 standard

[cPanelDavidG]

we have installed csf firewall AND i have seen warning for Check Apache weak SSL/TLS Ciphers (SSLCipherSuite)


Should we disable this option as mention above

we are using
cPanel 11.24.5-R37946
WHM 11.24.2 - X 3.9
CENTOS 5.3 i686 standard

Nowadays, it's generally considered good practice to disable SSLv2 Cipher support and just rely on SSLv3.

[InstaCarma_Tech]

Disabling SSLv2 and other weak encryption methods is a great idea. More importantly, it is mandatory if you desire to get PCI Compliant in future.