原文:https://blog.csdn.net/lyd135364/article/details/52179426

都是由于ihs配置中支持不推荐使用的ssl版本和弱密码套件引起的。

只要在配置文件中禁用sslv2,sslv3和申明使用的非弱密码套件即可,在/opt/IBM/HTTPServer/conf目录下的httpd.conf配置文件添加一下代码

 

# Example SSL configuration which supports SSLv3 and TLSv1
# To enable this support:
#   1) Create a key database with ikeyman
#   2) Update the KeyFile directive below to point to that key database
#   3) Uncomment the directives up through the end of the example
#
LoadModule ibm_ssl_module modules/mod_ibm_ssl.so
Listen 443
<VirtualHost *:443>
SSLEnable
SSLProtocolDisable SSLv2 SSLv3
SSLCipherSpec SSL_RSA_WITH_AES_182_CBC_SHA
SSLCipherSpec SSL_DHE_RSA_WITH_AES_128_CBC_SHA
SSLCipherSpec SSL_DHE_DSS_WITH_AES_128_CBC_SHA
SSLCipherSpec SSL_RSA_WITH_3DES_EDE_CBC_SHA
SSLCipherSpec SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA
SSLCipherSpec SSL_DHE_RSA_WITH_3DES_EDE_DBC_SHA
SSLCipherSpec SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
SSLCipherSpec SSL_DHE_DSS_WITH_RC4_128_SHA
SSLClientAuth 0
</VirtualHost>
KeyFile /opt/IBM/HTTPServer/bin/key.kdb
SSLDisable
# End of example SSL configuration

相关文章:

  • 2021-04-14
  • 2022-01-29
  • 2021-10-20
  • 2021-04-24
  • 2022-12-23
  • 2021-10-04
  • 2021-11-16
猜你喜欢
  • 2021-08-07
  • 2022-12-23
  • 2022-02-27
  • 2021-05-06
  • 2022-02-17
  • 2021-11-17
相关资源
相似解决方案