From 77c76bece19ee9412f9593cf16be5afa253d80f2 Mon Sep 17 00:00:00 2001 From: James Laska Date: Tue, 27 Jan 2015 13:18:29 -0500 Subject: [PATCH] Disable SSLv3 in apache config Fixes: https://trello.com/c/BGy5voWf --- config/awx-httpd-443.conf | 1 + 1 file changed, 1 insertion(+) diff --git a/config/awx-httpd-443.conf b/config/awx-httpd-443.conf index 6923a2bc0a..c74ec5697a 100644 --- a/config/awx-httpd-443.conf +++ b/config/awx-httpd-443.conf @@ -9,6 +9,7 @@ WSGISocketPrefix /var/run/wsgi SSLEngine on SSLCertificateFile /etc/tower/tower.cert SSLCertificateKeyFile /etc/tower/tower.key + SSLProtocol all -SSLv3 -SSLv2 WSGIScriptAlias / /var/lib/awx/wsgi.py WSGIPassAuthorization On