Disabling SSLv3

diff --git a/templates/site.erb b/templates/site.erb
index b044a2e36d438b9ee7fc6e70e8638ad76758656a..dd6c243b2417d891a33851ab573d065a70da224a 100644 (file)
--- a/templates/site.erb
+++ b/templates/site.erb
@@ -62,7 +62,7 @@
 <% end %>
    # SSL Configuration
    SSLEngine on
-   SSLProtocol -ALL +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2
+   SSLProtocol -ALL -SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2
    SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH
    SSLHonorCipherOrder on
    SSLCompression off