packages: apache/apache-mod_ssl.conf, apache/apache.spec disable SSLv2

psz psz at pld-linux.org
Tue Jul 6 10:18:24 CEST 2010


Author: psz                          Date: Tue Jul  6 08:18:24 2010 GMT
Module: packages                      Tag: HEAD
---- Log message:
disable SSLv2

---- Files affected:
packages/apache:
   apache-mod_ssl.conf (1.19 -> 1.20) , apache.spec (1.598 -> 1.599) 

---- Diffs:

================================================================
Index: packages/apache/apache-mod_ssl.conf
diff -u packages/apache/apache-mod_ssl.conf:1.19 packages/apache/apache-mod_ssl.conf:1.20
--- packages/apache/apache-mod_ssl.conf:1.19	Tue Jan  5 11:01:25 2010
+++ packages/apache/apache-mod_ssl.conf	Tue Jul  6 10:18:18 2010
@@ -70,10 +70,16 @@
 #   Enable/Disable SSL for this virtual host.
 SSLEngine on
 
+#   Usable SSL protocol flavors:
+#   This directive can be used to control the SSL protocol flavors mod_ssl
+#   should use when establishing its server environment. Clients then can only
+#   connect with one of the provided protocols.
+SSLProtocol all -SSLv2
+
 #   SSL Cipher Suite:
 #   List the ciphers that the client is permitted to negotiate.
 #   See the mod_ssl documentation for a complete list.
-SSLCipherSuite ALL:!ADH:!EXP:!LOW:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+eNULL
+SSLCipherSuite ALL:!ADH:!EXP:!LOW:!SSLv2:RC4+RSA:+HIGH:+MEDIUM
 
 #   Server Certificate:
 #   Point SSLCertificateFile at a PEM encoded certificate.  If

================================================================
Index: packages/apache/apache.spec
diff -u packages/apache/apache.spec:1.598 packages/apache/apache.spec:1.599
--- packages/apache/apache.spec:1.598	Sat Apr 10 22:47:14 2010
+++ packages/apache/apache.spec	Tue Jul  6 10:18:18 2010
@@ -42,7 +42,7 @@
 Summary(tr.UTF-8):	Lider WWW tarayıcı
 Name:		apache
 Version:	2.2.15
-Release:	3
+Release:	4
 License:	Apache v2.0
 Group:		Networking/Daemons/HTTP
 Source0:	http://www.apache.org/dist/httpd/httpd-%{version}.tar.gz
@@ -2764,6 +2764,9 @@
 All persons listed below can be reached at <cvs_login>@pld-linux.org
 
 $Log$
+Revision 1.599  2010/07/06 08:18:18  psz
+disable SSLv2
+
 Revision 1.598  2010/04/10 20:47:14  arekm
 - release 3
 
================================================================

---- CVS-web:
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/apache/apache-mod_ssl.conf?r1=1.19&r2=1.20&f=u
    http://cvs.pld-linux.org/cgi-bin/cvsweb.cgi/packages/apache/apache.spec?r1=1.598&r2=1.599&f=u



More information about the pld-cvs-commit mailing list