Tame the poodle. Disable SSLv3.

This commit is contained in:
jim-p 2014-10-15 08:40:36 -04:00
parent 07c24bf190
commit 29be59ad8e
1 changed files with 1 additions and 0 deletions

View File

@ -1152,6 +1152,7 @@ EOD;
// Harden SSL a bit for PCI conformance testing
$lighty_config .= "ssl.use-sslv2 = \"disable\"\n";
$lighty_config .= "ssl.use-sslv3 = \"disable\"\n";
/* Hifn accelerators do NOT work with the BEAST mitigation code. Do not allow it to be enabled if a Hifn card has been detected. */
$fd = @fopen("{$g['varlog_path']}/dmesg.boot", "r");