thomas
/
sovereign
關注 1
收藏 0
複製 0
程式碼 問題 0 合併請求 0 版本發佈 0 Wiki 活動
瀏覽代碼

Disable SSLv3 in all Apache vhosts

Patrick O'Doherty 9 年之前
父節點
a4c72d429b
當前提交
6f6fc6a90f
共有 8 個檔案被更改，包括 8 行新增 和 8 行删除
分割檢視 顯示文件統計
  1. 1
    1
      roles/blog/templates/etc_apache2_sites-available_blog.j2
  2. 1
    1
      roles/git/templates/etc_apache2_sites-available_cgit.j2
  3. 1
    1
      roles/mailserver/templates/etc_apache2_sites-available_autoconfig.j2
  4. 1
    1
      roles/newebe/templates/etc_apache2_sites-available_newebe.j2
  5. 1
    1
      roles/news/templates/etc_apache2_sites-available_selfoss.j2
  6. 1
    1
      roles/owncloud/templates/etc_apache2_sites-available_owncloud.j2
  7. 1
    1
      roles/readlater/templates/etc_apache2_sites-available_wallabag.j2
  8. 1
    1
      roles/webmail/templates/etc_apache2_sites-available_roundcube.j2

+ 1
- 1
roles/blog/templates/etc_apache2_sites-available_blog.j2 查看文件 

@@ -11,7 +11,7 @@
11 11 
     ServerAlias www.{{ domain }}
12 12
13 13 
     SSLEngine on
14 
-    SSLProtocol ALL -SSLv2
14 
+    SSLProtocol ALL -SSLv2 -SSLv3
15 15 
     SSLHonorCipherOrder On
16 16 
     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS
17 17 
     SSLCertificateFile      /etc/ssl/certs/wildcard_public_cert.crt

+ 1
- 1
roles/git/templates/etc_apache2_sites-available_cgit.j2 查看文件 

@@ -8,7 +8,7 @@
8 8 
     ServerName {{ cgit_domain }}
9 9
10 10 
     SSLEngine on
11 
-    SSLProtocol ALL -SSLv2
11 
+    SSLProtocol ALL -SSLv2 -SSLv3
12 12 
     SSLHonorCipherOrder On
13 13 
     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS
14 14 
     SSLCertificateFile      /etc/ssl/certs/wildcard_public_cert.crt

+ 1
- 1
roles/mailserver/templates/etc_apache2_sites-available_autoconfig.j2 查看文件 

@@ -19,7 +19,7 @@
19 19 
     ServerName {{ mail_server_autoconfig_hostname }}
20 20
21 21 
     SSLEngine on
22 
-    SSLProtocol ALL -SSLv2
22 
+    SSLProtocol ALL -SSLv2 -SSLv3
23 23 
     SSLHonorCipherOrder On
24 24 
     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS
25 25 
     SSLCertificateFile      /etc/ssl/certs/wildcard_public_cert.crt

+ 1
- 1
roles/newebe/templates/etc_apache2_sites-available_newebe.j2 查看文件 

@@ -9,7 +9,7 @@
9 9 
     ServerName {{ newebe_domain }}
10 10 
     SSLEngine On
11 11
12 
-    SSLProtocol ALL -SSLv2
12 
+    SSLProtocol ALL -SSLv2 -SSLv3
13 13 
     SSLHonorCipherOrder On
14 14 
     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS
15 15 
     SSLCertificateFile /etc/ssl/certs/wildcard_public_cert.crt

+ 1
- 1
roles/news/templates/etc_apache2_sites-available_selfoss.j2 查看文件 

@@ -8,7 +8,7 @@
8 8 
     ServerName {{ selfoss_domain }}
9 9
10 10 
     SSLEngine on
11 
-    SSLProtocol ALL -SSLv2
11 
+    SSLProtocol ALL -SSLv2 -SSLv3
12 12 
     SSLHonorCipherOrder On
13 13 
     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS
14 14 
     SSLCertificateFile      /etc/ssl/certs/wildcard_public_cert.crt

+ 1
- 1
roles/owncloud/templates/etc_apache2_sites-available_owncloud.j2 查看文件 

@@ -8,7 +8,7 @@
8 8 
     ServerName {{ owncloud_domain }}
9 9
10 10 
     SSLEngine on
11 
-    SSLProtocol ALL -SSLv2
11 
+    SSLProtocol ALL -SSLv2 -SSLv3
12 12 
     SSLHonorCipherOrder On
13 13 
     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS
14 14 
     SSLCertificateFile      /etc/ssl/certs/wildcard_public_cert.crt

+ 1
- 1
roles/readlater/templates/etc_apache2_sites-available_wallabag.j2 查看文件 

@@ -8,7 +8,7 @@
8 8 
     ServerName {{ wallabag_domain }}
9 9
10 10 
     SSLEngine on
11 
-    SSLProtocol ALL -SSLv2
11 
+    SSLProtocol ALL -SSLv2 -SSLv3
12 12 
     SSLHonorCipherOrder On
13 13 
     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS
14 14 
     SSLCertificateFile      /etc/ssl/certs/wildcard_public_cert.crt

+ 1
- 1
roles/webmail/templates/etc_apache2_sites-available_roundcube.j2 查看文件 

@@ -8,7 +8,7 @@
8 8 
     ServerName {{ webmail_domain }}
9 9
10 10 
     SSLEngine on
11 
-    SSLProtocol ALL -SSLv2
11 
+    SSLProtocol ALL -SSLv2 -SSLv3
12 12 
     SSLHonorCipherOrder On
13 13 
     SSLCipherSuite ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AES:RSA+3DES:!ADH:!AECDH:!MD5:!DSS
14 14 
     SSLCertificateFile      /etc/ssl/certs/wildcard_public_cert.crt

Write Preview
Loading…
取消
儲存