#!/bin/sh
if [ "$(netstat -tapn | grep :443 | awk {'print $7'} | sed "s#^[0-9]*/##")" == "apache2" ]; then
  if [ ! -f /etc/apache2/conf.d/x_disable_SSLv3.conf ]; then
    cat <<EOF >> /etc/apache2/conf.d/x_disable_SSLv3.conf
<IfModule mod_ssl.c>
SSLProtocol all -SSLv2 -SSLv3
</IfModule>
EOF
    /etc/init.d/apache2 restart
  fi
fi
exit 0
# for checking that service
testssl.sh --poodle <vHost> | grep POODLE