I'm editing /etc/httpd/conf.d/ssl.conf
and I'm adding SSLProtocol all -SSLv2 -SSLv3 at the bottom of the file (commenting out the default settings) and restarting apache.
But when I use one of the better SSL test websites, it tells me "Server has SSL v3 enabled"
I've checked httpd.conf and there's nothing protocol-related in there.
There is no httpsd.conf.
Other changes I mage in ssl.conf do have an effect. It only seems to be SSLv3 that I can't disable.
And if the currently circulating news is accurate then I really need to get this disabled both for the webserver apache and the Plesk nginx ASAP
![Sad :-(](./images/smilies/icon_sad.gif)