From 53124ed9dc52e8aee60d9018ffb32c18f03c4daa Mon Sep 17 00:00:00 2001 From: Till Brehm <tbrehm@ispconfig.org> Date: Thu, 16 Oct 2014 10:37:35 -0400 Subject: [PATCH] Implemented: FS#3706 - disable SSLv3 to protect servers agains POODLE attack. --- install/tpl/apache_ispconfig.vhost.master | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/install/tpl/apache_ispconfig.vhost.master b/install/tpl/apache_ispconfig.vhost.master index 4973af0..3619e16 100644 --- a/install/tpl/apache_ispconfig.vhost.master +++ b/install/tpl/apache_ispconfig.vhost.master @@ -63,6 +63,7 @@ # SSL Configuration <tmpl_var name="ssl_comment">SSLEngine On + <tmpl_var name="ssl_comment">SSLProtocol All -SSLv2 -SSLv3 <tmpl_var name="ssl_comment">SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt <tmpl_var name="ssl_comment">SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key <tmpl_var name="ssl_bundle_comment">SSLCACertificateFile /usr/local/ispconfig/interface/ssl/ispserver.bundle -- Gitblit v1.9.1