commit 28e665c545497fd068cc55970e0d0c52e90cdb93
author Filip Pytloun <filip@pytloun.cz> Thu Nov 12 09:14:00 2015 +0100
committer Filip Pytloun <filip@pytloun.cz> Thu Nov 12 09:14:00 2015 +0100
tree 3ecf6f80b06673a31c17795bc2c1305921b01d8b
parent 3d1c2b0c28b8cd1641ebb5954a10e589cb362e2a

Ensure SSLv3 is disabled

apache/files/_ssl_normal.conf

diff --git a/apache/files/_ssl_normal.conf b/apache/files/_ssl_normal.conf
index b99fe80..5d10288 100644
--- a/apache/files/_ssl_normal.conf
+++ b/apache/files/_ssl_normal.conf
@@ -1,2 +1,3 @@
 
-SSLCipherSuite ALL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:+eNULL
\ No newline at end of file
+SSLCipherSuite ALL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:+eNULL
+SSLProtocol all -SSLv2 -SSLv3

apache/files/_ssl_secure.conf

diff --git a/apache/files/_ssl_secure.conf b/apache/files/_ssl_secure.conf
index 553bce8..e22e611 100644
--- a/apache/files/_ssl_secure.conf
+++ b/apache/files/_ssl_secure.conf
@@ -1,2 +1,3 @@
 
-SSLCipherSuite HIGH:!aNULL:!MD5
\ No newline at end of file
+SSLCipherSuite HIGH:!aNULL:!MD5
+SSLProtocol all -SSLv2 -SSLv3