You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by ra...@apache.org on 2014/11/05 11:45:30 UTC
[36/50] [abbrv] git commit: updated refs/heads/master to 4c5f792
systemvm: Prefer TLS over SSL in apache, POODLE workaround (CVE20143566)
Just prefer TLS over SSL in apache configuration in systemvm
Signed-off-by: Rohit Yadav <ro...@shapeblue.com>
(cherry picked from commit 88acc9bd53cbf6f8896d32576f916c20704a3403)
Signed-off-by: Rohit Yadav <ro...@shapeblue.com>
Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo
Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/84e44a4d
Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/84e44a4d
Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/84e44a4d
Branch: refs/heads/master
Commit: 84e44a4dba5fdab33ed76d787f84705366e4e670
Parents: 07ba078
Author: Rohit Yadav <ro...@shapeblue.com>
Authored: Tue Nov 4 01:43:55 2014 +0530
Committer: Rohit Yadav <ro...@shapeblue.com>
Committed: Tue Nov 4 01:50:06 2014 +0530
----------------------------------------------------------------------
systemvm/patches/debian/config/etc/apache2/httpd.conf | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/cloudstack/blob/84e44a4d/systemvm/patches/debian/config/etc/apache2/httpd.conf
----------------------------------------------------------------------
diff --git a/systemvm/patches/debian/config/etc/apache2/httpd.conf b/systemvm/patches/debian/config/etc/apache2/httpd.conf
index 0565a8c..2a6b921 100644
--- a/systemvm/patches/debian/config/etc/apache2/httpd.conf
+++ b/systemvm/patches/debian/config/etc/apache2/httpd.conf
@@ -1,2 +1,2 @@
-SSLProtocol -ALL +SSLv3 +TLSv1
+SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM