Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

nmap --script ssl-enum-ciphers mpc.ece.utexas.edu


 From Paul - Editing httpd conf

etc/httpd/conf.d/ssl.conf edit:

# SSL Protocol support:

# List the enable protocol levels with which clients will be able to

# connect. Disable SSLv2 access by default:

SSLProtocol all -SSLv3 -SSLv2 -TLSv1 -TLSv1.1


# SSL Cipher Suite:

# List the ciphers that the client is permitted to negotiate.

# See the mod_ssl documentation for a complete list.

#SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW

SSLCipherSuite ALL:!ADH:!EXPORT:RC4+RSA:+HIGH

Restarted httpd service.



Additional References from the ISO:
------------------------------
https://www.imperialviolet.org/2014/10/14/poodle.html
https://www.openssl.org/~bodo/ssl-poodle.pdf
https://tools.ietf.org/html/draft-ietf-tls-downgrade-scsv-00
http://askubuntu.com/questions/537196/how-do-i-patch-workaround-sslv3-poodle-vulnerability-cve-2014-3566

...