Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. It only takes a minute to sign up.
Sign up to join this community
For some security reason, I need to use TLS1.2 protocol for my webapp. I can edit the httpd config file to choose ssl protocal and sslCipherSuite, but when I found that if I set sslCipherSuite to HIGH:!aNULL:!MD5, it would enable few set of CipherSuite.
Can I specify a sslCipherSuite for it, let say "TLS_RSA_WITH_AES_128_CBC_SHA256" ??
My httpd version is Apache/2.2.15
Thank you.
I need to use TLS1.2 protocol for my webapp.
If you want to enforce TLS 1.2 you need to set the protocol version accordingly and not the cipher suites. The relevant option is SSLProtocol. To allow only TLSv1.2 use and forbid previous protocol versions use:
SSLProtocol TLSv1.2
See the official documentation for more details.
Can I specify a sslCipherSuite for it, let say "TLS_RSA_WITH_AES_128_CBC_SHA256" ??
To specify a cipher suite use the SSLCipherSuite option. The syntax needs to include the cipher in a syntax which can be understood by OpenSSL, see ciphers for more information. If you want to allow only this specific cipher use
SSLCipherSuite AES128-SHA256
