19825273 horizon default config should disable SSL 2 & 3
authorDrew Fisher <drew.fisher@oracle.com>
Wed, 15 Oct 2014 15:19:07 -0600
changeset 2152 1cea7a430dd7
parent 2151 8977d970976a
child 2153 f64a9f4ada4d
19825273 horizon default config should disable SSL 2 & 3
components/openstack/horizon/files/openstack-dashboard-tls.conf
--- a/components/openstack/horizon/files/openstack-dashboard-tls.conf	Tue Oct 14 13:50:20 2014 -0700
+++ b/components/openstack/horizon/files/openstack-dashboard-tls.conf	Wed Oct 15 15:19:07 2014 -0600
@@ -20,6 +20,10 @@
     ServerName openstack.example.com
 
     SSLEngine On
+
+    # Disable the known insecure SSLv2 & SSLv3 protocols
+    SSLProtocol all -SSLv2 -SSLv3
+
     #
     # For an overview on SSL with Apache see:
     #    http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html