Skip to content

Commit 22a6318

Browse files
committed
Merge pull request #189 from konstantin-komelin/D7
* Disabled SSLv3 to fix POODLE vulnerability.
2 parents 3009c0e + 8cd712b commit 22a6318

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

sites-available/example.com.conf

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -171,6 +171,9 @@ server {
171171
ssl_certificate /etc/ssl/certs/example-cert.pem;
172172
ssl_certificate_key /etc/ssl/private/example.key;
173173

174+
# Disable SSL v3 protocol to fix POODLE bug.
175+
ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
176+
174177
## Strict Transport Security header for enhanced security. See
175178
## http://www.chromium.org/sts. I've set it to 2 hours; set it to
176179
## whichever age you want. However, we can't set this here because adding

0 commit comments

Comments
 (0)