@rg305 Setting SSLProtocol -all TLSv1.2
and SSLProtocol -all TLSv1.3
with my other default TLS settings elsewhere it works nicely. Setting -tls1_1
or -tls1_3
on the OpenSSL s_client
command line results in a failure when connecting to the Apache TLSv1.2
VirtualHost (as expected), but not with -tls1_2
. Same goes for the TLSv1.3
VirtualHost, but obviously failures with -tls1_1
and -tls1_2
but not with -tls1_3
.
It seems Added the "Old" Mozilla SSL Generator TLSv1
and TLSv1.1
don't play very well with my other TLS settings.SSLCipherSuite
directive to those two specific VirtualHost blocks and gee, what'll you know, it works now. TLS1.0 and TLS1.1 only VirtualHost, working like a charm. Not effecting any other VirtualHosts at all.