Mastering Linux Security and Hardening - Second Edition

Hardening Apache SSL/TLS on Ubuntu

For this demo, we'll use two Ubuntu 18.04 virtual machines. We'll install Apache on the first one and sslscan on the second one. You can theoretically use sslscan on CentOS, but I found that its implementation is buggy and doesn't work correctly:

1. To install Apache on your Ubuntu machine, just do the following:

sudo apt install apache2

This also installs the mod_ssl package, which contains the libraries and configuration files for SSL/TLS implementation. At the time of writing, in January 2020, Ubuntu 18.04 is the current Long Term Support version. Its Apache package still doesn't support the newest TLSv1.3, although its OpenSSL package does. (Apache in Ubuntu 19.04 and 19.10 do support it, but since they're ...