CVE­2014­3566: Avoid using SSLv3 on apache2 that runs on SSVM

yadvr · yadvr · commit a458383d0a27 · 2014-11-06T20:36:43.000+05:30
Signed-off-by: Rohit Yadav &lt;rohit.yadav@shapeblue.com&gt;
diff --git a/tools/appliance/definitions/systemvm64template/postinstall.sh b/tools/appliance/definitions/systemvm64template/postinstall.sh
@@ -215,6 +215,7 @@ configure_apache2() {
    # Backup stock apache configuration since we may modify it in Secondary Storage VM
    cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig
    cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig
+   sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf
 }
 
 configure_services() {
diff --git a/tools/appliance/definitions/systemvmtemplate/postinstall.sh b/tools/appliance/definitions/systemvmtemplate/postinstall.sh
@@ -205,6 +205,7 @@ configure_apache2() {
    # Backup stock apache configuration since we may modify it in Secondary Storage VM
    cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig
    cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig
+   sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf
 }
 
 configure_services() {

Original file line number	Diff line number	Diff line change
`@@ -215,6 +215,7 @@ configure_apache2() {`
`215`	`215`	`# Backup stock apache configuration since we may modify it in Secondary Storage VM`
`216`	`216`	`cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig`
`217`	`217`	`cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig`
	`218`	`+ sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf`
`218`	`219`	`}`
`219`	`220`
`220`	`221`	`configure_services() {`
Original file line number	Diff line number	Diff line change
`@@ -205,6 +205,7 @@ configure_apache2() {`
`205`	`205`	`# Backup stock apache configuration since we may modify it in Secondary Storage VM`
`206`	`206`	`cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig`
`207`	`207`	`cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig`
	`208`	`+ sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf`
`208`	`209`	`}`
`209`	`210`
`210`	`211`	`configure_services() {`