Return-Path: X-Original-To: apmail-cloudstack-commits-archive@www.apache.org Delivered-To: apmail-cloudstack-commits-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id F183017BDA for ; Tue, 4 Nov 2014 09:11:00 +0000 (UTC) Received: (qmail 98922 invoked by uid 500); 4 Nov 2014 09:11:00 -0000 Delivered-To: apmail-cloudstack-commits-archive@cloudstack.apache.org Received: (qmail 98881 invoked by uid 500); 4 Nov 2014 09:11:00 -0000 Mailing-List: contact commits-help@cloudstack.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cloudstack.apache.org Delivered-To: mailing list commits@cloudstack.apache.org Received: (qmail 98872 invoked by uid 99); 4 Nov 2014 09:11:00 -0000 Received: from tyr.zones.apache.org (HELO tyr.zones.apache.org) (140.211.11.114) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 04 Nov 2014 09:11:00 +0000 Received: by tyr.zones.apache.org (Postfix, from userid 65534) id 7AB76A0883A; Tue, 4 Nov 2014 09:11:00 +0000 (UTC) Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit From: bhaisaab@apache.org To: commits@cloudstack.apache.org Message-Id: <78f29f4c2e884945978283ae8ecb7212@git.apache.org> X-Mailer: ASF-Git Admin Mailer Subject: git commit: updated refs/heads/4.3 to f7378d8 Date: Tue, 4 Nov 2014 09:11:00 +0000 (UTC) Repository: cloudstack Updated Branches: refs/heads/4.3 4f69fab5e -> f7378d8ad CVE­2014­3566: Avoid using SSLv3 on apache2 that runs on SSVM Signed-off-by: Rohit Yadav Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/f7378d8a Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/f7378d8a Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/f7378d8a Branch: refs/heads/4.3 Commit: f7378d8ad56eeda209df6fc144c0ddecc543618f Parents: 4f69fab Author: Rohit Yadav Authored: Tue Nov 4 14:40:26 2014 +0530 Committer: Rohit Yadav Committed: Tue Nov 4 14:40:26 2014 +0530 ---------------------------------------------------------------------- tools/appliance/definitions/systemvm64template/postinstall.sh | 1 + tools/appliance/definitions/systemvmtemplate/postinstall.sh | 1 + 2 files changed, 2 insertions(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/cloudstack/blob/f7378d8a/tools/appliance/definitions/systemvm64template/postinstall.sh ---------------------------------------------------------------------- diff --git a/tools/appliance/definitions/systemvm64template/postinstall.sh b/tools/appliance/definitions/systemvm64template/postinstall.sh index 2ba4f36..f222180 100644 --- a/tools/appliance/definitions/systemvm64template/postinstall.sh +++ b/tools/appliance/definitions/systemvm64template/postinstall.sh @@ -206,6 +206,7 @@ configure_apache2() { # Backup stock apache configuration since we may modify it in Secondary Storage VM cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig + sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf } configure_services() { http://git-wip-us.apache.org/repos/asf/cloudstack/blob/f7378d8a/tools/appliance/definitions/systemvmtemplate/postinstall.sh ---------------------------------------------------------------------- diff --git a/tools/appliance/definitions/systemvmtemplate/postinstall.sh b/tools/appliance/definitions/systemvmtemplate/postinstall.sh index 96059fd..08d13d1 100644 --- a/tools/appliance/definitions/systemvmtemplate/postinstall.sh +++ b/tools/appliance/definitions/systemvmtemplate/postinstall.sh @@ -188,6 +188,7 @@ configure_apache2() { # Backup stock apache configuration since we may modify it in Secondary Storage VM cp /etc/apache2/sites-available/default /etc/apache2/sites-available/default.orig cp /etc/apache2/sites-available/default-ssl /etc/apache2/sites-available/default-ssl.orig + sed -i 's/SSLProtocol all -SSLv2$/SSLProtocol all -SSLv2 -SSLv3/g' /etc/apache2/mods-available/ssl.conf } configure_services() {