| 1 | # SSL protocols to use |
| 2 | ssl_protocols = !SSLv2 !SSLv3 |
fix_apache2.sh
· 148 B · Bash
Raw
cat <<EOF >> /etc/apache2/conf.d/x_disable_SSLv3.conf
<IfModule mod_ssl.c>
SSLProtocol all -SSLv2 -SSLv3
</IfModule>
EOF
/etc/init.d/apache2 restart
| 1 | cat <<EOF >> /etc/apache2/conf.d/x_disable_SSLv3.conf |
| 2 | <IfModule mod_ssl.c> |
| 3 | SSLProtocol all -SSLv2 -SSLv3 |
| 4 | </IfModule> |
| 5 | EOF |
| 6 | /etc/init.d/apache2 restart |
haproxy.conf
· 128 B · Text
Raw
# this is a haproxy config snippet, include me into /etc/haproxy/haproxy.conf
bind :443 ssl crt <crt> ciphers <ciphers> no-sslv3
| 1 | # this is a haproxy config snippet, include me into /etc/haproxy/haproxy.conf |
| 2 | bind :443 ssl crt <crt> ciphers <ciphers> no-sslv3 |
| 1 | # this is a postfix config snippet, include me into /etc/postfix/main.cf |
| 2 | smtp_tls_protocols=!SSLv2,!SSLv3 |
| 3 | smtp_tls_mandatory_protocols=!SSLv2,!SSLv3 |
| 4 | smtpd_tls_protocols=!SSLv2,!SSLv3 |
| 5 | smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3 |
| 1 | # this is a nginx config snippet, put me into /etc/nginx/conf.d |
| 2 | ssl_session_cache shared:SSL:10m; |
| 3 | ssl_session_timeout 10m; |
| 4 | ssl_protocols TLSv1 TLSv1.1 TLSv1.2; |