From: Silvio Rhatto <rhatto@riseup.net>
Date: Thu, 23 Oct 2014 18:27:55 +0000 (-0200)
Subject: Disabling SSLv3
X-Git-Url: https://gitweb.fluxo.info/?a=commitdiff_plain;h=aabdff0f60ef75cc6a8e2fcb25a85e05a407e657;p=puppet-apache.git

Disabling SSLv3
---

diff --git a/templates/site.erb b/templates/site.erb
index b044a2e..dd6c243 100644
--- a/templates/site.erb
+++ b/templates/site.erb
@@ -62,7 +62,7 @@
 <% end %>
    # SSL Configuration
    SSLEngine on
-   SSLProtocol -ALL +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2
+   SSLProtocol -ALL -SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2
    SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH
    SSLHonorCipherOrder on
    SSLCompression off