NShiftKey-Rule-Guide logo NShiftKey-Rule-Guide

1. Vulnerability Description

2. How to check vulnerability

$ openssl s_client -cipher 3DES -connect example.com:443

3. Vulnerability Countermeasure

"SSLCipherSuite ALL:!3DES:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL"
To prohibit the use of 3DES cipher suites considered vulnerable in the above string, remove 3DES:! from the string.

after editing 
"SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL"