disable ssl2 in apache2

[Anonymous_User]

Running an oes2sp3 server on sles10sp4. We had a penetration test run,
and one thing was suggested to fix.

Wondering how one would disable ssl2 in apache2 on this box. I haven't
been able to find much on this, most of what I find is for straight
sles, cent os, etc.

Suggestions?

--
Stevo

[Anonymous_User]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

The steps for Apache on Linux should be pretty consistent across
distros; the conf files are in /etc/apache2 and look for files with
'ssl' in the name. Disabling ciphers is pretty straight-forward as I
recall.

Good luck.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
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=nNes
-----END PGP SIGNATURE-----

[Anonymous_User]

ab sounds like they 'said':

> The steps for Apache on Linux should be pretty consistent across
> distros; the conf files are in /etc/apache2 and look for files with
> 'ssl' in the name. Disabling ciphers is pretty straight-forward as I
> recall.

So my response to ab's comment is...

I found a doc finally that walked me through it. I believe I have ssl2
disabled, now to see about the 'Weak' Ciphers.

--
Stevo