We are trying to disable sslv3 for poodle vulnerability.so i disabled in ssl.conf
SSLProtocol -ALL +TLSv1 -SSLv2 -SSLv3
and tried to connect using tlsv1 using openssl command.
openssl s_client -host localhost -port 8001 -tls1
New, TLSv1/SSLv3, Cipher is AES256-SHA Server public key is 2048 bit Secure Renegotiation IS NOT supported SSL-Session: Protocol : TLSv1 Cipher : AES256-SHA Session-ID: B391D1D3B9EAC8CEF97838AA3A1D1277 Session-ID-ctx:
I am forcing openssl to connect tlsv1 ,but it is still showing sslv3(New, TLSv1/SSLv3, Cipher is AES256-SHA),please let me know why ot shows sslv3 even after disable in ssl.conf?