To resolve poodle vulnerability please add the following to the virtual host: #resolve poodle vulnerability SSLHonorCipherOrder on SSLProtocol ALL -SSLv2 -SSLv3 SSLCipherSuite EECDH+AESGCM:EECDH+AES256:EECDH+AES128:EECDH+3DES:EDH+AES:RSA+AESGCM:RSA+AES:RSA+3DES:!ECDSA:!NULL:!MD5:!DSS And to allow this globally please add in the /etc/httpd/conf.d/ssl.conf file: SSLProtocol -all -SSLv2 -SSLv3 +TLSv1