From 0fbddae702713ee7e21533c51dcb1918c1729b3b Mon Sep 17 00:00:00 2001 From: Ossi Salmi Date: Thu, 13 Nov 2014 11:02:40 +0200 Subject: [PATCH] apache: Disable SSLv3 --- apache/templates/site.https.conf.erb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/apache/templates/site.https.conf.erb b/apache/templates/site.https.conf.erb index c249234..48ff2da 100644 --- a/apache/templates/site.https.conf.erb +++ b/apache/templates/site.https.conf.erb @@ -15,8 +15,8 @@ SSLEngine on # SSL Protocol support: # List the enable protocol levels with which clients will be able to -# connect. Disable SSLv2 access by default: -SSLProtocol all -SSLv2 +# connect. Disable SSLv2 and SSLv3 access by default: +SSLProtocol all -SSLv2 -SSLv3 # SSL Cipher Suite: # List the ciphers that the client is permitted to negotiate.