How can I disable SSLv3 and TLS1 on a solaris 10 server
I tried the apache.conf and sshd.conf, no luck
-bash-3.2# encrypt -l
aes 128 256
arcfour 8 2048
des 64 64
3des 128 192
from sshd_config
Protocol 2
From etc/apache2/ssl.conf
SSLCipherSuite ALL:!ADH:!EXPORT56:-AES256-SHA:-DHE-RSA-AES256-SHA:-DHE-DSS-AES256-SHA:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
when I do a ssh -vvv <server IP>, I got:
debug2: kex_parse_kexinit: ssh-rsa,ssh-dss
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour
debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,arcfour
debug2: kex_parse_kexinit: hmac-sha2-256,hmac-sha2-512,hmac-sha1,hmac-sha2-256-96,hmac-sha2-512-96,hmac-sha1-96,hmac-md5,hmac-md5-96