summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authordrebs <drebs@leap.se>2014-11-26 20:20:52 -0200
committerdrebs <drebs@leap.se>2014-12-05 14:40:05 -0200
commitc88472a94c15adef4275242934f2a3eec9778dd4 (patch)
tree83956f9e29a8da4b64450193b5e1aeac926bd51c
parente073ff3c736f70fbf0ae9767db9b223becee0b4e (diff)
Enforce TLSv1 in soledad server (#6437).
-rw-r--r--server/changes/bug_6437_avoid-sslv31
-rw-r--r--server/pkg/soledad3
2 files changed, 3 insertions, 1 deletions
diff --git a/server/changes/bug_6437_avoid-sslv3 b/server/changes/bug_6437_avoid-sslv3
new file mode 100644
index 00000000..5d41fbb3
--- /dev/null
+++ b/server/changes/bug_6437_avoid-sslv3
@@ -0,0 +1 @@
+ o Avoid use of SSLv3 (#6437).
diff --git a/server/pkg/soledad b/server/pkg/soledad
index 841233d1..62b7c5f8 100644
--- a/server/pkg/soledad
+++ b/server/pkg/soledad
@@ -19,6 +19,7 @@ CERT_PATH=/etc/leap/soledad-server.pem
PRIVKEY_PATH=/etc/leap/soledad-server.key
TWISTD_PATH=/usr/bin/twistd
HOME=/var/lib/soledad/
+SSL_METHOD=TLSv1_METHOD
[ -r /etc/default/soledad ] && . /etc/default/soledad
@@ -35,7 +36,7 @@ case "$1" in
--logfile=$LOGFILE \
web \
--wsgi=$OBJ \
- --port=ssl:$HTTPS_PORT:privateKey=$PRIVKEY_PATH:certKey=$CERT_PATH
+ --port=ssl:${HTTPS_PORT}:privateKey=${PRIVKEY_PATH}:certKey=${CERT_PATH}:sslmethod=${SSL_METHOD}
echo "."
;;