Repository: cloudstack
Updated Branches:
  refs/heads/master 8b636bd41 -> ce51fe32f


CVE­2014­3566: Avoid using SSLv3 on apache2 webserver used by SSVM

Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com>


Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo
Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/ce51fe32
Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/ce51fe32
Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/ce51fe32

Branch: refs/heads/master
Commit: ce51fe32f9289717bb7af01d4e3fb2b1cfddc59a
Parents: 8b636bd
Author: Rohit Yadav <rohit.ya...@shapeblue.com>
Authored: Tue Nov 4 14:39:28 2014 +0530
Committer: Rohit Yadav <rohit.ya...@shapeblue.com>
Committed: Tue Nov 4 14:46:22 2014 +0530

----------------------------------------------------------------------
 .../definitions/systemvmtemplate/configure_systemvm_services.sh     | 1 +
 1 file changed, 1 insertion(+)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cloudstack/blob/ce51fe32/tools/appliance/definitions/systemvmtemplate/configure_systemvm_services.sh
----------------------------------------------------------------------
diff --git 
a/tools/appliance/definitions/systemvmtemplate/configure_systemvm_services.sh 
b/tools/appliance/definitions/systemvmtemplate/configure_systemvm_services.sh
index 013a8f6..fc3d8f9 100644
--- 
a/tools/appliance/definitions/systemvmtemplate/configure_systemvm_services.sh
+++ 
b/tools/appliance/definitions/systemvmtemplate/configure_systemvm_services.sh
@@ -28,6 +28,7 @@ function configure_apache2() {
    # Backup stock apache configuration since we may modify it in Secondary 
Storage VM
    cp /etc/apache2/sites-available/default 
/etc/apache2/sites-available/default.orig
    cp /etc/apache2/sites-available/default-ssl 
/etc/apache2/sites-available/default-ssl.orig
+   sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' 
/etc/apache2/mods-available/ssl.conf
 }
 
 function install_cloud_scripts() {

Reply via email to