I have an odd issue. The SSLProtocol config is getting applied in my ssl.conf file but the SSLCipherSuite config is not. I have tested this by changing each option and running scan with Qualys SSL Labs.After several hours of banging my head against the wall, I decided to try putting the SSLCipherSuite directly in one of my vHosts and instantly got an A+ rating.So, I have the same ciphers in the ssl.conf and inside one of my vHosts in httpd.conf. When running scan against my vHost with the SSLCipherSuite, I get an A+, when I run the scan against one of my other vHosts (hoping the global ssl.conf will apply) I get a B.I have 17 vHosts and I would prefer to figure this out with the global 'VirtualHost default:443' so I don't have to add this to every vHost individually.- UPDATE 6/14 -I am using Apache + Centos 6.5.I have checked my httpd.conf and it does have Include conf.d/*.conf enabled by default which is the location of the ssl.conf file (./conf.d/ssl.conf)With my version of Apache + CentOS it does not have available and enabled directories. Only a single conf.d directory where all .conf files reside.I have checked the enabled vHosts with the command below and it does show my ssl.conf is loaded and the default vhost defined in that file is enabled.# httpd -SVirtualHost configuration:wildcard NameVirtualHosts and _default_ servers:*:443                  is a NameVirtualHost         default server localhost (/etc/httpd/conf.d/ssl.conf:75)         port 443 namevhost localhost (/etc/httpd/conf.d/ssl.conf:75)         port 443 namevhost {mydomain}.com (/etc/httpd/conf/httpd.conf:1023)         port 443 namevhost .......         .......         .......(x60)I have also performed a graceful reload# apachectl configtest && apachectl -k gracefulSyntax OK
SSLCipherSuite settings not taking effect from Apache ssl.conf, only when duplicated in each virtual host
apache;https;virtualhost