cloudstack-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Santhosh Edukulla <santhosh.eduku...@citrix.com>
Subject RE: git commit: updated refs/heads/master to 88acc9b
Date Tue, 04 Nov 2014 00:31:13 GMT
Rohit,

Apart from SSLv3, we may want to disable TLS1.0, TLS1.1, as they have similar vulnerabilities.

TLS1.2 is preferrred.

Regards,
Santhosh
________________________________________
From: bhaisaab@apache.org [bhaisaab@apache.org]
Sent: Monday, November 03, 2014 3:18 PM
To: commits@cloudstack.apache.org
Subject: git commit: updated refs/heads/master to 88acc9b

Repository: cloudstack
Updated Branches:
  refs/heads/master aa8477034 -> 88acc9bd5


systemvm: Prefer TLS over SSL in apache, POODLE workaround (CVE??2014??3566)

Just prefer TLS over SSL in apache configuration in systemvm

Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>


Project: http://git-wip-us.apache.org/repos/asf/cloudstack/repo
Commit: http://git-wip-us.apache.org/repos/asf/cloudstack/commit/88acc9bd
Tree: http://git-wip-us.apache.org/repos/asf/cloudstack/tree/88acc9bd
Diff: http://git-wip-us.apache.org/repos/asf/cloudstack/diff/88acc9bd

Branch: refs/heads/master
Commit: 88acc9bd53cbf6f8896d32576f916c20704a3403
Parents: aa84770
Author: Rohit Yadav <rohit.yadav@shapeblue.com>
Authored: Tue Nov 4 01:43:55 2014 +0530
Committer: Rohit Yadav <rohit.yadav@shapeblue.com>
Committed: Tue Nov 4 01:43:55 2014 +0530

----------------------------------------------------------------------
 systemvm/patches/debian/config/etc/apache2/httpd.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cloudstack/blob/88acc9bd/systemvm/patches/debian/config/etc/apache2/httpd.conf
----------------------------------------------------------------------
diff --git a/systemvm/patches/debian/config/etc/apache2/httpd.conf b/systemvm/patches/debian/config/etc/apache2/httpd.conf
index 0565a8c..2a6b921 100644
--- a/systemvm/patches/debian/config/etc/apache2/httpd.conf
+++ b/systemvm/patches/debian/config/etc/apache2/httpd.conf
@@ -1,2 +1,2 @@
-SSLProtocol -ALL +SSLv3 +TLSv1
+SSLProtocol +TLSv1 +TLSv1.1 +TLSv1.2
 SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM


Mime
View raw message