The LimeSurvey Fund-Raiser 2012 is complete. Thank you for donating a total of 25,000 USD!     List of donors »
Welcome, Guest
Username: Password: Remember me
Forgot your password? Forgot your username?
  • Page:
  • 1

TOPIC: How do I disable SSLv2 and weak ciphers

How do I disable SSLv2 and weak ciphers 2 months 3 weeks ago #93124

  • myaeger
  • myaeger's Avatar
  • OFFLINE
  • Fresh Lemon
  • Posts: 1
  • Karma: 0
I am new to an organization that has Lime Survey. A recent vulnerability scan identified that the server running Lime Survey allows SSLv2 and weak ciphers to it. I know how to turn these off in IIS, but I have no idea how to do it with Lime Survey. There doesn't seem to be an option in the admin tool, and I can't seem to find the Apache command line. Can someone please point me in the right direction? I need to get this closed ASAP.
The administrator has disabled public write access.

How do I disable SSLv2 and weak ciphers 2 months 3 weeks ago #93129

  • holch
  • holch's Avatar
  • OFFLINE
  • LimeSurvey Team
  • Posts: 1973
  • Thank you received: 156
  • Karma: 80
This should have nothing to do with Limesurvey, but with the underlying webserver.

So you need to check what webserver Limesurvey is running on. Probably Apache.

www.sslshopper.com/article-how-to-disabl...l-2.0-in-apache.html
Have a look at the manual! It is a really valuable source for information. Here some helpful links:
Manual (EN) | Question Types | Question Attributes | Workarounds
If you found this answer helpful and it saved you some time please consider a donation to the project to keep Limesurvey going!
The administrator has disabled public write access.
  • Page:
  • 1
Moderators: DenisChenu, ITEd
Time to create page: 0.162 seconds
Donation Image