![检查 SSL 弱密码 SSL3_RSA_RC4_128_MD5、SSL3_RSA_RC4_128_SHA、TLS1_RSA_RC4_128_MD5、TLS1_RSA_RC4_128_SHA](https://linux22.com/image/641372/%E6%A3%80%E6%9F%A5%20SSL%20%E5%BC%B1%E5%AF%86%E7%A0%81%20SSL3_RSA_RC4_128_MD5%E3%80%81SSL3_RSA_RC4_128_SHA%E3%80%81TLS1_RSA_RC4_128_MD5%E3%80%81TLS1_RSA_RC4_128_SHA.png)
我正在为 PCI 合规性做好准备,并且有一个使用来自 Apache 的加密的区域,其报告如下:
Weak ciphers offered by this service:
SSL3_RSA_RC4_128_MD5
SSL3_RSA_RC4_128_SHA
TLS1_RSA_RC4_128_MD5
TLS1_RSA_RC4_128_SHA
Apache/etc/httpd/httpd/conf.d/ssl.conf
包含:
SSLProtocol -ALL +SSLv3 +TLSv1
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
SSLHonorCipherOrder On
我做错了什么吗?应该使用什么密码来传递上述警告?