Repository: cloudstack Updated Branches: refs/heads/4.5 07ba078ee -> 84e44a4db
systemvm: Prefer TLS over SSL in apache, POODLE workaround (CVEÂ2014Â3566) Just prefer TLS over SSL in apache configuration in systemvm Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com> (cherry picked from commit 88acc9bd53cbf6f8896d32576f916c20704a3403) Signed-off-by: Rohit Yadav <rohit.ya...@shapeblue.com> Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/84e44a4d Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/84e44a4d Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/84e44a4d Branch: refs/heads/4.5 Commit: 84e44a4dba5fdab33ed76d787f84705366e4e670 Parents: 07ba078 Author: Rohit Yadav <rohit.ya...@shapeblue.com> Authored: Tue Nov 4 01:43:55 2014 +0530 Committer: Rohit Yadav <rohit.ya...@shapeblue.com> Committed: Tue Nov 4 01:50:06 2014 +0530 ---------------------------------------------------------------------- systemvm/patches/debian/config/etc/apache2/httpd.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cloudstack/blob/84e44a4d/systemvm/patches/debian/config/etc/apache2/httpd.conf ---------------------------------------------------------------------- diff --git a/systemvm/patches/debian/config/etc/apache2/httpd.conf b/systemvm/patches/debian/config/etc/apache2/httpd.conf index 0565a8c..2a6b921 100644 --- a/systemvm/patches/debian/config/etc/apache2/httpd.conf +++ b/systemvm/patches/debian/config/etc/apache2/httpd.conf @@ -1,2 +1,2 @@ -SSLProtocol -ALL +SSLv3 +TLSv1 +SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2 SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
