I have disabled SSLv2 in ssl.conf in /etc/httpd/conf.d by adding following: SSLProtocol -ALL +SSLv3 +TLSv1.
Restarted Apache, but when using open_ssl on the command line it still reports SSLv2 being available. I have checked the http.conf file and there are no SSL directives in it and I can find no other files in /etc/httpd/conf.d that conflict. I am stumped. I am using Virtual Hosts but the ssl.conf file accommodates that.
Apache 2.2.15 64-bit on a CentOS 5.6 box running Plesk 9.5
