Repository: cloudstack Updated Branches: refs/heads/master aa8477034 -> 88acc9bd5
systemvm: Prefer TLS over SSL in apache, POODLE workaround (CVEÂ2014Â3566) Just prefer TLS over SSL in apache configuration in systemvm Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com> Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/88acc9bd Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/88acc9bd Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/88acc9bd Branch: refs/heads/master Commit: 88acc9bd53cbf6f8896d32576f916c20704a3403 Parents: aa84770 Author: Rohit Yadav <rohit.ya...@shapeblue.com> Authored: Tue Nov 4 01:43:55 2014 +0530 Committer: Rohit Yadav <rohit.ya...@shapeblue.com> Committed: Tue Nov 4 01:43:55 2014 +0530 ---------------------------------------------------------------------- systemvm/patches/debian/config/etc/apache2/httpd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cloudstack/blob/88acc9bd/systemvm/patches/debian/config/etc/apache2/httpd.conf ---------------------------------------------------------------------- diff --git a/systemvm/patches/debian/config/etc/apache2/httpd.conf b/systemvm/patches/debian/config/etc/apache2/httpd.conf index 0565a8c..2a6b921 100644 --- a/systemvm/patches/debian/config/etc/apache2/httpd.conf +++ b/systemvm/patches/debian/config/etc/apache2/httpd.conf @@ -1,2 +1,2 @@ -SSLProtocol -ALL +SSLv3 +TLSv1 +SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2 SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
