infrastructure/ansible
1
0
Fork 0
Code Pull requests 7 Activity Actions

Try disabling SSLv3 in the individual SKS virtualhost bloks

Browse source
This commit is contained in:
Nick Bebout 2014-10-21 00:00:38 +00:00
parent e1a098145d
commit b44af2e6ce
1 changed files with 2 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
roles/keyserver/files/sks.conf
View file

@ -54,6 +54,7 @@ NameVirtualHost *:443
SSLCertificateFile /etc/pki/tls/wildcard-2014.fedoraproject.org.cert SSLCertificateFile /etc/pki/tls/wildcard-2014.fedoraproject.org.cert
SSLCertificateChainFile /etc/pki/tls/wildcard-2014.fedoraproject.org.intermediate.cert SSLCertificateChainFile /etc/pki/tls/wildcard-2014.fedoraproject.org.intermediate.cert
SSLCertificateKeyFile /etc/pki/tls/wildcard-2014.fedoraproject.org.key SSLCertificateKeyFile /etc/pki/tls/wildcard-2014.fedoraproject.org.key
SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2
ProxyPass / http://localhost:11371/ ProxyPass / http://localhost:11371/
ProxyPassReverse / http://localhost:11371/ ProxyPassReverse / http://localhost:11371/
SetEnv proxy-nokeepalive 1 SetEnv proxy-nokeepalive 1
@ -68,6 +69,7 @@ NameVirtualHost *:443
SSLEngine on SSLEngine on
SSLCertificateFile /etc/pki/tls/keys_fedoraproject_org.crt.pem SSLCertificateFile /etc/pki/tls/keys_fedoraproject_org.crt.pem
SSLCertificateKeyFile /etc/pki/tls/keys_fedoraproject_org.key SSLCertificateKeyFile /etc/pki/tls/keys_fedoraproject_org.key
SSLProtocol -All +TLSv1 +TLSv1.1 +TLSv1.2
ProxyPass / http://localhost:11371/ ProxyPass / http://localhost:11371/
ProxyPassReverse / http://localhost:11371/ ProxyPassReverse / http://localhost:11371/
SetEnv proxy-nokeepalive 1 SetEnv proxy-nokeepalive 1