zeta709/Fix.md

Last active August 29, 2015 14:07

Star (0) You must be signed in to star a gist
Fork (0) You must be signed in to fork a gist

Learn more about clone URLs
Clone this repository at <script src="https://gist.github.com/zeta709/99dade5ed84d23597473.js"></script>
Save zeta709/99dade5ed84d23597473 to your computer and use it in GitHub Desktop.

Download ZIP

CVE-2014-3566 (POODLE), OpenSSL CVE-2014-3566 Man In The Middle Information Disclosure Vulnerability

Raw

Fix.md

Fix for POODLE attack

Web server

Apache

Edit '/etc/apache2/mods-enabled/ssl.conf'

SSLProtocol all -SSLv2 -SSLv3

Retart Apache

Mail server

Postfix

Edit

postconf -e 'smtpd_tls_mandatory_protocols=!SSLv2,!SSLv3'
postconf -e 'smtpd_tls_protocols=!SSLv2,!SSLv3'
stconf -e 'smtp_tls_protocols=!SSLv2,!SSLv3'

Restart Postfix

Dovecot

Edit '/etc/dovecot/dovecot.conf' or '/etc/dovecot/conf.d/10-ssl.conf'

ssl_protocols = !SSLv2 !SSLv3

Restart Dovecot

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment