summaryrefslogtreecommitdiffstats
path: root/etc/inc
diff options
context:
space:
mode:
authorjim-p <jimp@pfsense.org>2014-10-15 08:40:36 -0400
committerjim-p <jimp@pfsense.org>2014-10-15 08:40:36 -0400
commit5ff7f58e5903cca4f99edd20f9db402163527fd6 (patch)
tree430219ec5553f5c7238b96ff8061b85e06517975 /etc/inc
parent8ff85c397c28042b42239e7ae4c0ed2f6554ebe9 (diff)
downloadpfsense-5ff7f58e5903cca4f99edd20f9db402163527fd6.zip
pfsense-5ff7f58e5903cca4f99edd20f9db402163527fd6.tar.gz
Tame the poodle. Disable SSLv3.
Diffstat (limited to 'etc/inc')
-rw-r--r--etc/inc/system.inc1
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/inc/system.inc b/etc/inc/system.inc
index fcaeb57..0bb18e7 100644
--- a/etc/inc/system.inc
+++ b/etc/inc/system.inc
@@ -1247,6 +1247,7 @@ EOD;
// Harden SSL a bit for PCI conformance testing
$lighty_config .= "ssl.use-sslv2 = \"disable\"\n";
+ $lighty_config .= "ssl.use-sslv3 = \"disable\"\n";
/* Hifn accelerators do NOT work with the BEAST mitigation code. Do not allow it to be enabled if a Hifn card has been detected. */
$fd = @fopen("{$g['varlog_path']}/dmesg.boot", "r");
OpenPOWER on IntegriCloud