From 2d58bb6256af8bb71dc67075fd926744a661b945 Mon Sep 17 00:00:00 2001 From: Rohit Yadav Date: Tue, 4 Nov 2014 14:49:19 +0530 Subject: [PATCH] =?UTF-8?q?CVE=C2=AD2014=C2=AD3566:=20Avoid=20using=20SSLv?= =?UTF-8?q?3=20on=20apache2=20webserver=20used=20by=20SSVM?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Rohit Yadav --- tools/appliance/definitions/systemvm64template/postinstall.sh | 1 + tools/appliance/definitions/systemvmtemplate/postinstall.sh | 1 + 2 files changed, 2 insertions(+) diff --git a/tools/appliance/definitions/systemvm64template/postinstall.sh b/tools/appliance/definitions/systemvm64template/postinstall.sh index 32e59d91b88..b634f11d649 100644 --- a/tools/appliance/definitions/systemvm64template/postinstall.sh +++ b/tools/appliance/definitions/systemvm64template/postinstall.sh @@ -223,6 +223,7 @@ configure_apache2() { # Backup stock apache configuration since we may modify it in Secondary Storage VM cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig + sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf } configure_services() { diff --git a/tools/appliance/definitions/systemvmtemplate/postinstall.sh b/tools/appliance/definitions/systemvmtemplate/postinstall.sh index a292203c7fc..a1ae79262f4 100644 --- a/tools/appliance/definitions/systemvmtemplate/postinstall.sh +++ b/tools/appliance/definitions/systemvmtemplate/postinstall.sh @@ -213,6 +213,7 @@ configure_apache2() { # Backup stock apache configuration since we may modify it in Secondary Storage VM cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig + sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf } configure_services() {