diff --git a/apache2-ssl-global.conf b/apache2-ssl-global.conf
index 4896cb7..40e9fef 100644
--- a/apache2-ssl-global.conf
+++ b/apache2-ssl-global.conf
@@ -72,7 +72,7 @@
 
 	#  SSL protocols
 	#  Supporting TLS only is adequate nowadays
-	SSLProtocol all -SSLv2 -SSLv3
+	SSLProtocol TLSv1.2
 
 	#   SSL Cipher Suite:
 	#   List the ciphers that the client is permitted to negotiate.
diff --git a/apache2.changes b/apache2.changes
index b741672..1441a1b 100644
--- a/apache2.changes
+++ b/apache2.changes
@@ -1,3 +1,8 @@
+-------------------------------------------------------------------
+Mon Mar 26 14:16:14 UTC 2018 - pgajdos@suse.com
+
+- SSLProtocol TLSv1.2 [bsc#1086854]
+
 -------------------------------------------------------------------
 Mon Mar 19 09:15:28 UTC 2018 - pgajdos@suse.com