Attachment 154568 Details for Bug 34193 – Bug 34193: SSLProtocol enable in use versions and disable deprecated versions

[patch] Bug 34193: SSLProtocol enable in use versions and disable deprecated versions

Bug-34193-SSLProtocol-enable-in-use-versions-and-d.patch (text/plain), 1.66 KB, created by Martin Renvoize (ashimema) on 2023-08-17 13:10:11 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Renvoize (ashimema)

Created: 2023-08-17 13:10:11 UTC

Size: 1.66 KB

patch

obsolete

>From 82fbd9b4c8ae0e62972748a818e2fa8c17b920c0 Mon Sep 17 00:00:00 2001
>From: David Cook <dcook@prosentient.com.au>
>Date: Mon, 3 Jul 2023 23:52:53 +0000
>Subject: [PATCH] Bug 34193: SSLProtocol enable in use versions and disable
> deprecated versions
>
>This patch changes the default SSLProtocol for the Let's Encrypt
>HTTPS template, so that it enables in use versions of TLS while
>disabling the deprecated versions of TLS.
>
>Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
>---
> debian/templates/apache-site-https.conf.in | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
>diff --git a/debian/templates/apache-site-https.conf.in b/debian/templates/apache-site-https.conf.in
>index 196a415b8e..98fb506398 100644
>--- a/debian/templates/apache-site-https.conf.in
>+++ b/debian/templates/apache-site-https.conf.in
>@@ -12,7 +12,7 @@
> # OPAC
> <VirtualHost *:80> #https
> #  SSLEngine on
>-#  SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
>+#  SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
> #  SSLCompression off
> #  SSLHonorCipherOrder on
> #  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-SA-
>@@ -39,7 +39,7 @@
> # Intranet
> <VirtualHost *:80> #https
> #  SSLEngine on
>-#  SSLProtocol +TLSv1.2 +TLSv1.1 +TLSv1
>+#  SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
> #  SSLCompression off
> #  SSLHonorCipherOrder on
> #  SSLCipherSuite "ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES
>-- 
>2.41.0

Actions: View | Diff | Splinter Review

Attachments on bug 34193: 152994 | 154568