title: Is SSLv3 disabled on my Apache 2.4.9 (Win32?)
body: <p>I have Apache 2.4.9 running on windows Server 2008 R2.</p>
  
  <pre><code>SERVER_SOFTWARE                          Apache/2.4.9 (Win32) PHP/5.5.12 OpenSSL/1.0.1g 
  SSL_PROTOCOL                             TLSv1.2 
  Registered Stream Socket Transports      tcp, udp, ssl, sslv3, sslv2, tls
  </code></pre>
  
  <p>I need to immediately disable SSLv3 to prevent <a href="http://en.wikipedia.org/wiki/POODLE" rel="nofollow">Poodle attacks</a>. TO do that I opened the file <code>\conf\extra\httpd-ssl.conf</code></p>
  
  <p>Then I added the following line of code to it</p>
  
  <pre><code>SSLProtocol All -SSLv2 -SSLv3
  </code></pre>
  
  <p>After saving the changes, I restarted Apache.</p>
  
  <p>When came back up, I looked at the output of <code>phpinfo()</code> but I still can see the following</p>
  
  <p>SSL_PROTOCOL                             TLSv1.2 
  Registered Stream Socket Transports      tcp, udp, ssl, sslv3, sslv2, tls</p>
  
  <p>Is the <code>phpinfo()</code> where I check to see if the SSLv3 and SSLv2 are disabled or not?</p>
  
  <p>Here are more methods I have done to ensure I am doing this correctly.
  I tried adding this line instead of the other command (ie. 
  <code>SSLProtocol All -SSLv2 -SSLv3</code>)</p>
  
  <pre><code>SSLHonorCipherOrder On
  SSLProtocol -All +TLSv1.2
  </code></pre>
  
  <p>I even tried to searching for any file that contains the word "SSLProtocol" inside Apache24 directory like so</p>
  
  <pre><code>C:\Apache24&gt;findstr /s /i /p "SSLProtocol" *.*
  </code></pre>
  
  <p>this only found 2 files </p>
  
  <ol>
  <li>httpd-ssl.conf</li>
  <li>CHANGES.txt</li>
  </ol>
  
  <p>How to check if SSLv3 is disabled or not on my server? 
  If It is not disabled yet, how to properly disable it?</p>