systemvm: Prefer TLS over SSL in apache, POODLE workaround (CVE­2014­3566)

yadvr · yadvr · commit 84e44a4dba5f · 2014-11-04T01:50:06.000+05:30
Just prefer TLS over SSL in apache configuration in systemvm Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com> (cherry picked from commit 88acc9b) Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
diff --git a/systemvm/patches/debian/config/etc/apache2/httpd.conf b/systemvm/patches/debian/config/etc/apache2/httpd.conf
@@ -1,2 +1,2 @@
-SSLProtocol -ALL +SSLv3 +TLSv1
+SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2
 SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,2 @@`
`1`		`-SSLProtocol -ALL +SSLv3 +TLSv1`
	`1`	`+SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2`
`2`	`2`	`SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM`