It will, however, exclude all older browsers (including Opera Mini!), because it lacks non-PFS and RC4 cipher suites. The following configuration is (or used to be) the best configuration according to SSLLabs: SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1

What would the appropriate settings be for enabling TLS 1.0, TLS 1.1 and TLS 1.2, so the site can support older browsers, and also maintain a decent level of security? If we look at Qualys' test, we see that the server only supports TLS 1.2. SSLCACertificateFile /etc/apache2/ssl/gd_bundle-g2-g1.crt SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-SSLv3:-EXP:!kEDH Asking the users to switch browsers is unfortunately not an option, so I need to change the settings to support TLS 1.0, 1.1 and 1.2. It worked fine for a while, but users are reporting problems with accessing the page in Firefox. As a result of the Poodle vulnerability, I added the following SSLCipherSuite line. I have an Apache 2.4.7 web server running multiple domain names using a single IP address.

How to test tls 1.2 apache