- disable sslv2/3

diff --git a/lighttpd-ssl.conf b/lighttpd-ssl.conf
index 74cf564c775a6d803461753d9acc4ba72e4c1c8c..5f60997ca4335395511e1b4a2ab010ba430d83ef 100644 (file)
--- a/lighttpd-ssl.conf
+++ b/lighttpd-ssl.conf
@@ -24,6 +24,10 @@
 #ssl.honor-cipher-order = "enable"
 #
 
+# unsafe protocols
+ssl.use-sslv2 = "disable"
+ssl.use-sslv3 = "disable"
+
 $SERVER["socket"] == ":443" {
        ssl.engine = "enable"