RC4 Cipher

External

• https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what

Internal

• httpd SSL Configuration

Disable Support for the RC4 Cipher

Add ":!RC4" to the list of supported cipher suites and configure "SSLCipherSuite" in your virtual host. Example:

<VirtualHost ...>

    ...
    SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5:!SEED:!IDEA:!RC4
    ...
</VirtualHost>