summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSilvio Rhatto <rhatto@riseup.net>2014-10-23 16:25:59 -0200
committerSilvio Rhatto <rhatto@riseup.net>2014-10-23 16:25:59 -0200
commit8276c5e947953786945de7c6dbd2898e962cf402 (patch)
tree5ff214eea2de26c21afda4b369cffe3c889d5679
parent167abecea98e0357912149897adce15e09a4e084 (diff)
downloadpuppet-puppet-8276c5e947953786945de7c6dbd2898e962cf402.tar.gz
puppet-puppet-8276c5e947953786945de7c6dbd2898e962cf402.tar.bz2
Disabling SSLv3
-rw-r--r--templates/passenger.erb2
1 files changed, 1 insertions, 1 deletions
diff --git a/templates/passenger.erb b/templates/passenger.erb
index 364eca1..9bda8df 100644
--- a/templates/passenger.erb
+++ b/templates/passenger.erb
@@ -11,7 +11,7 @@ Listen <%= listen %>
<VirtualHost *:<%= listen %>>
SSLEngine on
- SSLProtocol -ALL +SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2
+ SSLProtocol -ALL -SSLv3 +TLSv1 +TLSv1.1 +TLSv1.2
SSLCipherSuite ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH
SSLCertificateFile /var/lib/puppetmaster/ssl/certs/<%= certname %>.pem