Repository: cloudstack Updated Branches: refs/heads/4.3 52cf8af08 -> faf531ef3
systemvm: Prefer TLS over SSL in apache, POODLE workaround (CVEÂ2014Â3566) Just prefer TLS over SSL in apache configuration in systemvm Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com> (cherry picked from commit 88acc9bd53cbf6f8896d32576f916c20704a3403) Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com> Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/faf531ef Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/faf531ef Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/faf531ef Branch: refs/heads/4.3 Commit: faf531ef3c9f2f4242ec9898130beefdcf92f138 Parents: 52cf8af Author: Rohit Yadav <rohit.ya...@shapeblue.com> Authored: Tue Nov 4 01:43:55 2014 +0530 Committer: Rohit Yadav <rohit.ya...@shapeblue.com> Committed: Tue Nov 4 01:51:40 2014 +0530 ---------------------------------------------------------------------- systemvm/patches/debian/config/etc/apache2/httpd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cloudstack/blob/faf531ef/systemvm/patches/debian/config/etc/apache2/httpd.conf ---------------------------------------------------------------------- diff --git a/systemvm/patches/debian/config/etc/apache2/httpd.conf b/systemvm/patches/debian/config/etc/apache2/httpd.conf index 0565a8c..2a6b921 100644 --- a/systemvm/patches/debian/config/etc/apache2/httpd.conf +++ b/systemvm/patches/debian/config/etc/apache2/httpd.conf @@ -1,2 +1,2 @@ -SSLProtocol -ALL +SSLv3 +TLSv1 +SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2 SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
