Dzahn has submitted this change and it was merged.

Change subject: svn - disable SSLv3
......................................................................


svn - disable SSLv3

svn.wm.org did not specify
SSL/TLS protocol versions

Change-Id: I9bd78b94ddb7f5efd20160b1458647dba04cd7c5
---
M modules/subversion/templates/apache/svn.wikimedia.org.erb
1 file changed, 1 insertion(+), 0 deletions(-)

Approvals:
  jenkins-bot: Verified
  Dzahn: Looks good to me, approved



diff --git a/modules/subversion/templates/apache/svn.wikimedia.org.erb 
b/modules/subversion/templates/apache/svn.wikimedia.org.erb
index 2ea9de9..7193a3a 100644
--- a/modules/subversion/templates/apache/svn.wikimedia.org.erb
+++ b/modules/subversion/templates/apache/svn.wikimedia.org.erb
@@ -49,6 +49,7 @@
        DocumentRoot /srv/org/wikimedia/svn
 
        SSLEngine on
+    SSLProtocol +ALL -SSLv2 -SSLv3
        SSLCertificateFile /etc/ssl/certs/svn.wikimedia.org.pem
        SSLCertificateKeyFile /etc/ssl/private/svn.wikimedia.org.key
        SSLCACertificatePath /etc/ssl/certs/

-- 
To view, visit https://gerrit.wikimedia.org/r/167327
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I9bd78b94ddb7f5efd20160b1458647dba04cd7c5
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Dzahn <dz...@wikimedia.org>
Gerrit-Reviewer: Dzahn <dz...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to