diff options
| author | drebs <drebs@leap.se> | 2014-11-26 20:20:52 -0200 |
|---|---|---|
| committer | drebs <drebs@leap.se> | 2014-12-05 14:40:05 -0200 |
| commit | c88472a94c15adef4275242934f2a3eec9778dd4 (patch) | |
| tree | 83956f9e29a8da4b64450193b5e1aeac926bd51c | |
| parent | e073ff3c736f70fbf0ae9767db9b223becee0b4e (diff) | |
Enforce TLSv1 in soledad server (#6437).
| -rw-r--r-- | server/changes/bug_6437_avoid-sslv3 | 1 | ||||
| -rw-r--r-- | server/pkg/soledad | 3 |
2 files changed, 3 insertions, 1 deletions
diff --git a/server/changes/bug_6437_avoid-sslv3 b/server/changes/bug_6437_avoid-sslv3 new file mode 100644 index 00000000..5d41fbb3 --- /dev/null +++ b/server/changes/bug_6437_avoid-sslv3 @@ -0,0 +1 @@ + o Avoid use of SSLv3 (#6437). diff --git a/server/pkg/soledad b/server/pkg/soledad index 841233d1..62b7c5f8 100644 --- a/server/pkg/soledad +++ b/server/pkg/soledad @@ -19,6 +19,7 @@ CERT_PATH=/etc/leap/soledad-server.pem PRIVKEY_PATH=/etc/leap/soledad-server.key TWISTD_PATH=/usr/bin/twistd HOME=/var/lib/soledad/ +SSL_METHOD=TLSv1_METHOD [ -r /etc/default/soledad ] && . /etc/default/soledad @@ -35,7 +36,7 @@ case "$1" in --logfile=$LOGFILE \ web \ --wsgi=$OBJ \ - --port=ssl:$HTTPS_PORT:privateKey=$PRIVKEY_PATH:certKey=$CERT_PATH + --port=ssl:${HTTPS_PORT}:privateKey=${PRIVKEY_PATH}:certKey=${CERT_PATH}:sslmethod=${SSL_METHOD} echo "." ;; |