- disable SSLv3 (poodle bug)

diff --git a/apache-mod_ssl.conf b/apache-mod_ssl.conf
index 37a5ad0a108700a0e43fd42d707bf963dede7874..da433b1af225f28869bb8a30d28d212c6e6cbbee 100644 (file)
--- a/apache-mod_ssl.conf
+++ b/apache-mod_ssl.conf
@@ -64,7 +64,7 @@ SSLSessionCacheTimeout  300
 #   This directive can be used to control the SSL protocol flavors mod_ssl
 #   should use when establishing its server environment. Clients then can only
 #   connect with one of the provided protocols.
-SSLProtocol all -SSLv2
+SSLProtocol all -SSLv2 -SSLv3
 
 #   SSL Cipher Suite:
 #   List the ciphers that the client is permitted to negotiate.