diff --git a/roles/taskotron/ssl-taskotron/templates/ssl.conf.j2 b/roles/taskotron/ssl-taskotron/templates/ssl.conf.j2 index 6de299565d..f7ac939596 100644 --- a/roles/taskotron/ssl-taskotron/templates/ssl.conf.j2 +++ b/roles/taskotron/ssl-taskotron/templates/ssl.conf.j2 @@ -76,7 +76,7 @@ SSLEngine on # SSL Protocol support: # List the enable protocol levels with which clients will be able to # connect. Disable SSLv2 access by default: -SSLProtocol all -SSLv2 +SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2 # SSL Cipher Suite: # List the ciphers that the client is permitted to negotiate. diff --git a/roles/taskotron/ssl-taskotron/templates/ssl.conf.rhel.j2 b/roles/taskotron/ssl-taskotron/templates/ssl.conf.rhel.j2 index 2dffeb713c..da5eb78f45 100644 --- a/roles/taskotron/ssl-taskotron/templates/ssl.conf.rhel.j2 +++ b/roles/taskotron/ssl-taskotron/templates/ssl.conf.rhel.j2 @@ -92,7 +92,7 @@ SSLEngine on # SSL Protocol support: # List the enable protocol levels with which clients will be able to # connect. Disable SSLv2 access by default: -SSLProtocol all -SSLv2 +SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2 # SSL Cipher Suite: # List the ciphers that the client is permitted to negotiate.