From: Arkadiusz Miśkiewicz <arekm@maven.pl>
Date: Mon, 20 Oct 2014 12:30:33 +0000 (+0200)
Subject: - disable SSLv3 (poodle bug)
X-Git-Tag: auto/th/apache-2.4.12-1~4
X-Git-Url: https://git.pld-linux.org/?p=packages%2Fapache.git;a=commitdiff_plain;h=87e57007f59fa59eb5fc9cadabc73acd5a51bedc

- disable SSLv3 (poodle bug)
---

diff --git a/apache-mod_ssl.conf b/apache-mod_ssl.conf
index 37a5ad0..da433b1 100644
--- a/apache-mod_ssl.conf
+++ b/apache-mod_ssl.conf
@@ -64,7 +64,7 @@ SSLSessionCacheTimeout  300
 #   This directive can be used to control the SSL protocol flavors mod_ssl
 #   should use when establishing its server environment. Clients then can only
 #   connect with one of the provided protocols.
-SSLProtocol all -SSLv2
+SSLProtocol all -SSLv2 -SSLv3
 
 #   SSL Cipher Suite:
 #   List the ciphers that the client is permitted to negotiate.