Web Server Security Poodle - How to disable SSLv3

UTM Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 7 replies
Subscribers 3 subscribers
Views 15374 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Poodle - How to disable SSLv3

Evianne over 10 years ago

Hi,

to avoid Poodle, you can manually disable SSLv3 for WAF:

Open /var/chroot-reverseproxy/usr/apache/conf/httpd.conf with a text editor
Edit the line 'SSLProtocol all -SSLv2':
SSLProtocol all -SSLv2 -SSLv3
Restart WAF: /var/mdw/scripts/reverseproxy restart

This is going to be fixed in 9.209.

Regards,
Sabine

This thread was automatically locked due to age.

Parents

0 Alessandro Massi over 7 years ago

Hi,

I have disable sslv3 but if I test with command openssl s_client -connect addess.com:port -ssl3 the handshake it's ok...why?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Alessandro Massi over 7 years ago

Hi,

I have disable sslv3 but if I test with command openssl s_client -connect addess.com:port -ssl3 the handshake it's ok...why?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 ewadie over 7 years ago in reply to Alessandro Massi

Sorry, can't really help you. But which UTM version are you using? SSLv3 was disabled over 3 years ago with version 9.209.
Cancel
Vote Up 0 Vote Down

Cancel
0 Alessandro Massi over 7 years ago in reply to ewadie

ewadie said:

Sorry, can't really help you. But which UTM version are you using? SSLv3 was disabled over 3 years ago with version 9.209.

Hi ewadie,

I have the last he last 9.505-4.. but maybe it's ok.. In the sophos shell i see write:errno=0 instead ssl3_read_bytes:sslv3 alert handshake failure as in my webserver
Cancel
Vote Up 0 Vote Down

Cancel