gas85
June 4, 2019, 9:13am
7
Yes, or just easier: SSLProtocol +TLSv1.2 +TLSv1.3.
# This TLSv1.2 only
SSLProtocol TLSv1.2
# To use TLSv1.2 and TLSv1.3 uncomment line below and comment one above. Please read note above.
#SSLProtocol +TLSv1.2 +TLSv1.3
Be aware that TLS 1.0 and 1.1 are deprecated https://www.keycdn.com/blog/deprecating-tls-1-0-and-1-1
I wrote short how-to “Apache 2.4.18 + Letsencrypt + Ubuntu 16.04/18.04 - SSL config for A+ on SSLLabs.com ”
Also here is how to enable HTTP2.0 in the same environment:
http2_apache2_ubuntu16.04.md
from https://techwombat.com/enable-http2-apache-ubuntu-16-04/
# Requirements
* A self-managed VPS or dedicated server with Ubuntu 16.04 running Apache 2.4.xx.
* A registered domain name with working HTTPS (TLS/SSL). HTTP/2 only works alongside HTTPS because most browsers, including Firefox and Chrome, don’t support HTTP/2 in cleartext (non-TLS) mode.
## Step 1: Upgrade Apache from PPA
Let’s assume you installed Apache from the standard stable Ubuntu repository using apt. When you check your version of apache2 by typing:show original