From f7378d8ad56eeda209df6fc144c0ddecc543618f Mon Sep 17 00:00:00 2001 From: Rohit Yadav Date: Tue, 4 Nov 2014 14:40:26 +0530 Subject: [PATCH] =?UTF-8?q?CVE=C2=AD2014=C2=AD3566:=20Avoid=20using=20SSLv?= =?UTF-8?q?3=20on=20apache2=20that=20runs=20on=20SSVM?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Rohit Yadav --- tools/appliance/definitions/systemvm64template/postinstall.sh | 1 + tools/appliance/definitions/systemvmtemplate/postinstall.sh | 1 + 2 files changed, 2 insertions(+) diff --git a/tools/appliance/definitions/systemvm64template/postinstall.sh b/tools/appliance/definitions/systemvm64template/postinstall.sh index 2ba4f36eeae..f2221807fb5 100644 --- a/tools/appliance/definitions/systemvm64template/postinstall.sh +++ b/tools/appliance/definitions/systemvm64template/postinstall.sh @@ -206,6 +206,7 @@ configure_apache2() { # Backup stock apache configuration since we may modify it in Secondary Storage VM cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig + sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf } configure_services() { diff --git a/tools/appliance/definitions/systemvmtemplate/postinstall.sh b/tools/appliance/definitions/systemvmtemplate/postinstall.sh index 96059fdc10a..08d13d1ddaa 100644 --- a/tools/appliance/definitions/systemvmtemplate/postinstall.sh +++ b/tools/appliance/definitions/systemvmtemplate/postinstall.sh @@ -188,6 +188,7 @@ configure_apache2() { # Backup stock apache configuration since we may modify it in Secondary Storage VM cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig + sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf } configure_services() {