Repository: cloudstack Updated Branches: refs/heads/4.3 4f69fab5e -> f7378d8ad
CVEÂ2014Â3566: Avoid using SSLv3 on apache2 that runs on SSVM Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com> Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/f7378d8a Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/f7378d8a Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/f7378d8a Branch: refs/heads/4.3 Commit: f7378d8ad56eeda209df6fc144c0ddecc543618f Parents: 4f69fab Author: Rohit Yadav <rohit.ya...@shapeblue.com> Authored: Tue Nov 4 14:40:26 2014 +0530 Committer: Rohit Yadav <rohit.ya...@shapeblue.com> Committed: Tue Nov 4 14:40:26 2014 +0530 ---------------------------------------------------------------------- tools/appliance/definitions/systemvm64template/postinstall.sh | 1 + tools/appliance/definitions/systemvmtemplate/postinstall.sh | 1 + 2 files changed, 2 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cloudstack/blob/f7378d8a/tools/appliance/definitions/systemvm64template/postinstall.sh ---------------------------------------------------------------------- diff --git a/tools/appliance/definitions/systemvm64template/postinstall.sh b/tools/appliance/definitions/systemvm64template/postinstall.sh index 2ba4f36..f222180 100644 --- a/tools/appliance/definitions/systemvm64template/postinstall.sh +++ b/tools/appliance/definitions/systemvm64template/postinstall.sh @@ -206,6 +206,7 @@ configure_apache2() { # Backup stock apache configuration since we may modify it in Secondary Storage VM cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig + sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf } configure_services() { http://git-wip-us.apache.org/repos/asf/cloudstack/blob/f7378d8a/tools/appliance/definitions/systemvmtemplate/postinstall.sh ---------------------------------------------------------------------- diff --git a/tools/appliance/definitions/systemvmtemplate/postinstall.sh b/tools/appliance/definitions/systemvmtemplate/postinstall.sh index 96059fd..08d13d1 100644 --- a/tools/appliance/definitions/systemvmtemplate/postinstall.sh +++ b/tools/appliance/definitions/systemvmtemplate/postinstall.sh @@ -188,6 +188,7 @@ configure_apache2() { # Backup stock apache configuration since we may modify it in Secondary Storage VM cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig + sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf } configure_services() {
