Turn off SSLv3

10b184d9 · Leigh B Stoller · d859078e · 10b184d9 · 10b184d9
Commit 10b184d9 authored Nov 11, 2014 by Leigh B Stoller
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

apache/v2/httpd.conf-ops.in apache/v2/httpd.conf-ops.in +1 -1

apache/v2/httpd.conf.in apache/v2/httpd.conf.in +1 -1

No files found.
--- a/apache/v2/httpd.conf-ops.in
+++ b/apache/v2/httpd.conf-ops.in
@@ -1143,7 +1143,7 @@ SSLEngine on
 #   SSL Protocol support:
 # List the enable protocol levels with which clients will be able to
 # connect.  Disable SSLv2 access by default:
-SSLProtocol all -SSLv2
+SSLProtocol all -SSLv2 -SSLv3

 #   SSL Cipher Suite:
 # List the ciphers that the client is permitted to negotiate.

--- a/apache/v2/httpd.conf.in
+++ b/apache/v2/httpd.conf.in
@@ -1142,7 +1142,7 @@ SSLEngine on
 #   SSL Protocol support:
 # List the enable protocol levels with which clients will be able to
 # connect.  Disable SSLv2 access by default:
-SSLProtocol all -SSLv2
+SSLProtocol all -SSLv2 -SSLv3

 #   SSL Cipher Suite:
 # List the ciphers that the client is permitted to negotiate.