From 84e44a4dba5fdab33ed76d787f84705366e4e670 Mon Sep 17 00:00:00 2001 From: Rohit Yadav Date: Tue, 4 Nov 2014 01:43:55 +0530 Subject: [PATCH] =?UTF-8?q?systemvm:=20Prefer=20TLS=20over=20SSL=20in=20ap?= =?UTF-8?q?ache,=20POODLE=20workaround=20(CVE=C2=AD2014=C2=AD3566)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Just prefer TLS over SSL in apache configuration in systemvm Signed-off-by: Rohit Yadav (cherry picked from commit 88acc9bd53cbf6f8896d32576f916c20704a3403) Signed-off-by: Rohit Yadav --- systemvm/patches/debian/config/etc/apache2/httpd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/systemvm/patches/debian/config/etc/apache2/httpd.conf b/systemvm/patches/debian/config/etc/apache2/httpd.conf index 0565a8c302d..2a6b921828b 100644 --- a/systemvm/patches/debian/config/etc/apache2/httpd.conf +++ b/systemvm/patches/debian/config/etc/apache2/httpd.conf @@ -1,2 +1,2 @@ -SSLProtocol -ALL +SSLv3 +TLSv1 +SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2 SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM