How to disable SSLv3 in Apache on Windows installed by Xampp

apache ssl xampp poodle-attack
Matt picture Matt · Oct 27, 2014 · Viewed 19.4k times · Source

I'm attempting to disable SSLv3 in Apache which I've installed on Windows via xampp. But I'm having trouble figuring out how. I was told that I needed to add

SSLProtocol All -SSLv2 -SSLv3

To my ssl config file but I'm not sure where that is.

I see a

C:\xampp\apache\conf\extra\httpd-ssl.conf

but from the research I've done heard that I'm looking for a ssl.conf file which doesn't seem to exist.

Any ideas?

Edit also, from the tutorials I was reading, I'm still not sure where in the config file I'd place the SSLProtocol All -SSLv2 -SSLv3 if I was able to find the config file.

Answer

Logan picture Logan · Nov 25, 2014

Had to figure this out myself and too like 30 minutes of Googling to figure it out. Just thought I'd answer it and leave this here for anyone else who comes by and looks at it.

xampp > apache > conf > extra > httpd-ssl.conf

Just add

SSLProtocol All -SSLv2 -SSLv3

right below

Listen 443

and then save and restart. Afterwards, goto http://poodlebleed.com/ and enter your domain and port to make sure that you are now good.

Hope this helps!

Related questions

How do I use https (SSL) in XAMPP while using virtual hosts

I am writing a php app on my local machine and would like to test to see if SSL is working. Bear with me because this is the first time I've ever used SSL. So far this is what I've …

Read More
ssl_error_rx_record_too_long and Apache SSL

I've got a customer trying to access one of my sites, and they keep getting this error > ssl_error_rx_record_too_long They're getting this error on all browsers, all platforms. I can't reproduce the problem at all. …

Read More
How do you redirect HTTPS to HTTP?

How do you redirect HTTPS to HTTP?. That is, the opposite of what (seemingly) everyone teaches. I have a server on HTTPS for which I paid an SSL certification for and a mirror for which I haven't and keep around …

Read More