Re: SSLv3 use

2014-11-11 Thread Rohit Yadav
I had disabled it for apache which runs on SSVM. I think it should not be a problem to use SSLv3 for internal components, but not for components/system VMs which may be public facing or provide public facing services. > On 12-Nov-2014, at 6:30 am, Demetrius Tsitrelis > wrote: > > Are there any

SSLv3 use

2014-11-11 Thread Demetrius Tsitrelis
Are there any plans to disable SSLv3 in favor of TLS in CloudStack? There are many places where SSLv3 is still enabled: the web servers, various plugins, etc.