]> git.openstreetmap.org Git - chef.git/commitdiff
projects / chef.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | patch | inline | side by side (parent: d6161fd)
Disable SSLv3
authorTom Hughes <tom@compton.nu>
Tue, 21 Oct 2014 09:23:11 +0000 (10:23 +0100)
committerTom Hughes <tom@compton.nu>
Tue, 21 Oct 2014 09:23:11 +0000 (10:23 +0100)
cookbooks/apache/templates/default/ssl.erb patch | blob | history

diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb
index 9f453858b12d4ed71be2ec2e06a062e822dc0fc1..1124f66d8550539316227603eb978910a9423780 100644 (file)
--- a/cookbooks/apache/templates/default/ssl.erb
+++ b/cookbooks/apache/templates/default/ssl.erb
@@ -1,5 +1,7 @@
 # DO NOT EDIT - This file is being maintained by Chef
 
 # DO NOT EDIT - This file is being maintained by Chef
 
+SSLProtocol All -SSLv2 -SSLv3
+
 SSLHonorCipherOrder On
 SSLCipherSuite aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5
 
 SSLHonorCipherOrder On
 SSLCipherSuite aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5
 
Chef configuration management public repo for configuring & maintaining the OpenStreetMap servers.