You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@ranger.apache.org by "Selvamohan Neethiraj (JIRA)" <ji...@apache.org> on 2014/11/14 06:40:35 UTC

[jira] [Resolved] (ARGUS-158) SSL service should not accept SSLv3 protocol (due to CVE-2014-3566)

     [ https://issues.apache.org/jira/browse/ARGUS-158?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Selvamohan Neethiraj resolved ARGUS-158.
----------------------------------------
    Resolution: Fixed

SSLv2Hello is added as valid protocol in Embed Tomcat Service

> SSL service should not accept SSLv3 protocol (due to CVE-2014-3566)
> -------------------------------------------------------------------
>
>                 Key: ARGUS-158
>                 URL: https://issues.apache.org/jira/browse/ARGUS-158
>             Project: Argus
>          Issue Type: Bug
>    Affects Versions: 0.4.0
>            Reporter: Selvamohan Neethiraj
>            Assignee: Selvamohan Neethiraj
>             Fix For: 0.4.0
>
>
> Both Admin Tool and UserSync tools should disable SSLv3 protocol.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)