These forums are locked and archived, but all topics have been migrated to the new forum. You can search for this topic on the new forum: Search for How do I turn off SSL v2 on port 10000 on the new forum.
Web Hosting and Cloud Computing Control Panels
Hi there,
You can disable it by logging into Virtualmin, click Webmin -> Webmin -> Webmin Configuration -> SSL Encryption, and for "Allowed SSL ciphers", add this string to the text box:
HIGH:MEDIUM:-SSLv2:!ADH
And that will do it!
Don't try setting "SSL protocol version" to anything but "detect automatically", as that won't work -- but you'll disable SSLv2 traffic with the above string.
-Eric
Thanks Big
So how would I test whether this has taken effect?
To see it work using SSLv3, type this from the command line:
openssl s_client -connect YOUR_HOST_NAME.tld:10000 -ssl3
That's what it looks like when a protocol is enabled.
Then try it with SSLv2 using this:
openssl s_client -connect YOUR_HOST_NAME.tld:10000 -ssl2
You should see a few errors, including this one:
12731:error:1406D0B8:SSL routines:GET_SERVER_HELLO:no cipher list:s2_clnt.c:450:
Which is essentially saying that SSLv2 is disabled.
-Eric
Many Thanks!