Commit 37d394e3 authored by Adam Lewenberg's avatar Adam Lewenberg
Browse files

version 001.009

parent fc55580f

NEWS

+5 −0
Original line number Diff line number Diff line 
release/001.009 (2014-10-15)



    Missed some conf files when disabling SSLv3 due to

    POODLE. (adamhl)



release/001.008 (2014-10-15)



    ssl-strength: disable SSLv3 due to POODLE. (adamhl)

files/etc/httpd/conf.d/ssl-vhost.conf.RHEL5

+1 −1
Original line number Diff line number Diff line
@@ -17,7 +17,7 @@ SSLEngine on 
#   SSL Protocol support:

# List the enable protocol levels with which clients will be able to

# connect.  Disable SSLv2 access by default:

SSLProtocol all -SSLv2

SSLProtocol all -SSLv2 -SSLv3



#   SSL Cipher Suite:

# List the ciphers that the client is permitted to negotiate.

files/etc/httpd/conf.d/ssl.conf

+1 −1
Original line number Diff line number Diff line
@@ -75,5 +75,5 @@ SSLCryptoDevice builtin 


# Permitted ciphers the client may negotiate.  Disable weak SSL ciphers

# that Nessus warns about.

SSLProtocol all -SSLv2

SSLProtocol all -SSLv2 -SSLv3

SSLCipherSuite  HIGH:MEDIUM:!ADH:!SSLv2:@STRENGTH