19825273 horizon default config should disable SSL 2 & 3 s11u2-sru
authorDrew Fisher <drew.fisher@oracle.com>
Mon, 27 Oct 2014 07:23:02 -0700
branchs11u2-sru
changeset 3426 be0c5ab90457
parent 3425 574ff1a7a2d9
child 3427 a593151e2a66
19825273 horizon default config should disable SSL 2 & 3
components/openstack/horizon/files/openstack-dashboard-tls.conf
--- a/components/openstack/horizon/files/openstack-dashboard-tls.conf	Fri Oct 17 14:55:29 2014 +0200
+++ b/components/openstack/horizon/files/openstack-dashboard-tls.conf	Mon Oct 27 07:23:02 2014 -0700
@@ -20,6 +20,10 @@
     ServerName openstack.example.com
 
     SSLEngine On
+
+    # Disable the known insecure SSLv2 & SSLv3 protocols
+    SSLProtocol all -SSLv2 -SSLv3
+
     #
     # For an overview on SSL with Apache see:
     #    http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html