SSLProtocol all -SSLv2

[payne]

It appears that it is picking up the ciphersuite from /usr/local/apache/conf/ssl.conf rather than from whm's apache global configuration.

So can I just edit the ssl.conf, or do I need to change something with whm to have it not look there, or what?

P.

[payne]

Figured it out. The sslciphersuite directive was manually set in:

/var/cpanel/templates/apache2/ssl_vhost.local

I updated it to:

[% IF vhost.sslciphersuite.length %]SSLCipherSuite [% vhost.sslciphersuite %][% END %]

And rebuilt the configuration. Now the vhosts are just picking up the main server sslciphersuite directive like I want them to.

P.