From c7535f4ff41a489ff27b56e08abd620dfda0eb0e Mon Sep 17 00:00:00 2001 From: Tom Hughes Date: Tue, 21 Oct 2014 10:23:11 +0100 Subject: [PATCH 1/1] Disable SSLv3 --- cookbooks/apache/templates/default/ssl.erb | 2 ++ 1 file changed, 2 insertions(+) diff --git a/cookbooks/apache/templates/default/ssl.erb b/cookbooks/apache/templates/default/ssl.erb index 9f453858b..1124f66d8 100644 --- a/cookbooks/apache/templates/default/ssl.erb +++ b/cookbooks/apache/templates/default/ssl.erb @@ -1,5 +1,7 @@ # DO NOT EDIT - This file is being maintained by Chef +SSLProtocol All -SSLv2 -SSLv3 + SSLHonorCipherOrder On SSLCipherSuite aRSA+HIGH:+kEDH:+kRSA:!kSRP:!kPSK:+3DES:!MD5 -- 2.43.2