HostGator Web Hosting Help

Disable SSLv3 on a VPS or Dedicated Server

Overview

This article will explain how to disable SSLv3 on a VPS or Dedicated server. This can help you avoid issues with vulnerabilities in SSLv3.



What you need

To begin, you will need to be able to login into your WHM.

Note: If this is your first time logging into the WHM, you may see a page titled Feature Showcase. Click on Exit to WHM at the bottom of the page.

Once logged in, you will need to open the Apache settings.

Open the Apache settings

  1. Type Apache in the search bar at the top left of the WHM.
  2. In the search results, click on Apache Configuration.

Change the SSL Cipher and Protocol settings

  1. On the Apache Configuration page, click on Global Configuration.
  2. The first option should be SSL Cipher Suite. Select the 2nd option, then copy this text into the box:
    ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP:!kEDH
  3. Under SSL/TLS Protocols, ensure the default setting, All -SSLv2 -SSLv3, is selected.
  4. Scroll to the bottom of the page and click the Save button.
  5. Click the Rebuild Configuration and Restart Apache button.

Note: After following these steps, it may be necessary to add "Options +FollowSymLinks" to the .htaccess file for your site.

Test the configuration

To test that SSL is disabled, you run this command:

curl -IL –sslv3 https://domain.com

Note: Replace domain.com with the domain for your site.

If SSLv3 has been disabled, you should see a message like this:

curl: (35) error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure



Was this resource helpful?

Did this resolve your issue?


Please add any other comments or suggestions about this content:





Recommended Help Content

This article will explain how-to enable FTP on a newly provisioned VPS or Dedicated cPanel server. Since FTP is an unsecured connection point to the server, cPanel has it disabled by default in version 11.86 or prior.
Knowledgebase Article 44,942 views tags: dedicated file ftp root server transfer vps

If you need to transfer or restore a cPanel account for your VPS or Dedicated server, there is a tool within the WHM panel to perform these tasks. This article is about transferring or restoring from another server or restoring after a re-image.
Knowledgebase Article 87,537 views tags: backup cpanel dedicated hosting restore server transfer vps

VPS and Dedicated servers come with all applications necessary to run a standard web and email server. The applications that come with the VPS and Dedicated servers are generally supported as-is by our support technicians.

Related Help Content

This article discusses some measures you can take to secure a Dedicated or VPS server
Knowledgebase Article 101,372 views tags: dedi security vps

This article will explain the process for uploading an SSL Certificate to SiteLock's dasboard. The steps for accessing the SSL Manager may vary depending on which user interface your account uses.
Knowledgebase Article 89,865 views tags: bundle ca certificates security sitelock ssl

How to fix inaccessible backups on Dedicated or VPS servers due to backup size.
Knowledgebase Article 128,709 views tags: backup dedi dedicated inaccessible loop stuck vps

How do I use the free shared SSL Certificate?
Knowledgebase Article 944,375 views tags: activate certificate install path shared ssl

VPS and Dedicated customers with servers running the CentOS 6 operating system will not be able to upgrade cPanel past version 86. The cPanel team will still support CentOS 6 with cPanel 86 until March 31st, 2021.
Knowledgebase Article 114,517 views tags: centos cpanel dedicated hosting private server upgrade virtual vps

This article will show a way to protect specific pages of your website with SSL. This may have benefits for SEO and can be used on pages that contain forms, shopping carts or any other page where users might enter sensitive information.
Knowledgebase Article 120,543 views tags: htaccess pages specific ssl

This article will explain how to use RoR through passenger on a hosting account
Knowledgebase Article 176,398 views tags: dedicated passenger redmine ruby vps

This article explains how to download a copy of your SSL certificate.
Knowledgebase Article 230,080 views tags: certificate move ssl