Uninstalling or Disabling mod_ssl on Apache

[Clay Page]

Hello everyone,

I'm seeking help on How do I uninstall mod_ssl or disable it on Apache. If you have experience or insights regarding this process and can assist with my questions, your support would be highly appreciated.

[Delaney martin]

If you wish to remove or deactivate the mod_ssl module in Apache, the process varies depending on your server's operating system. Mod_ssl is utilized for SSL/TLS support, and there might be reasons to disable it. Here are instructions for some common operating systems:


Step 1: Find the SSL Protocol Configuration on your Apache server.

For example,

A. Type one of the following commands:

grep -i -r "SSLProtocol" /etc/apache2
or
grep -i -r "SSLProtocol" /etc/httpd

In these instances, /etc/apache2 and /etc/httpd serve as the base directories for an Apache installation.

For a comprehensive list of default base directories and installation layouts in Apache HTTPD across various operating systems, refer to DistrosDefaultLayout.

Note: If the given command doesn't locate the "SSLProtocol" string, consider searching for SSLEngine using one of the following commands:

grep -i -r "SSLEngine" /etc/apache2
or
grep -i -r "SSLEngine" /etc/httpd


B. The command will display the available Virtual Hosts or your config file.

C. Access the config file or Virtual Host for which you intend to disable the SSL v3 protocol.


Step 2: Add or modify the following lines in your configuration:

SSLProtocol all -SSLv2 -SSLv3

Note: If you use the grep -i -r "SSLEngine" command, search for "SSLEngine On" and include SSLProtocol all -SSLv2 -SSLv3 in the line below.


Step 3: Restart Apache.

apachectl -k restart