diff options
| author | jim-p <jimp@pfsense.org> | 2014-10-15 08:40:36 -0400 |
|---|---|---|
| committer | jim-p <jimp@pfsense.org> | 2014-10-15 08:40:36 -0400 |
| commit | 5ff7f58e5903cca4f99edd20f9db402163527fd6 (patch) | |
| tree | 430219ec5553f5c7238b96ff8061b85e06517975 /etc/inc | |
| parent | 8ff85c397c28042b42239e7ae4c0ed2f6554ebe9 (diff) | |
| download | pfsense-5ff7f58e5903cca4f99edd20f9db402163527fd6.zip pfsense-5ff7f58e5903cca4f99edd20f9db402163527fd6.tar.gz | |
Tame the poodle. Disable SSLv3.
Diffstat (limited to 'etc/inc')
| -rw-r--r-- | etc/inc/system.inc | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/etc/inc/system.inc b/etc/inc/system.inc index fcaeb57..0bb18e7 100644 --- a/etc/inc/system.inc +++ b/etc/inc/system.inc @@ -1247,6 +1247,7 @@ EOD; // Harden SSL a bit for PCI conformance testing $lighty_config .= "ssl.use-sslv2 = \"disable\"\n"; + $lighty_config .= "ssl.use-sslv3 = \"disable\"\n"; /* Hifn accelerators do NOT work with the BEAST mitigation code. Do not allow it to be enabled if a Hifn card has been detected. */ $fd = @fopen("{$g['varlog_path']}/dmesg.boot", "r"); |
