Hi Rodrigo,

> https://www.ssllabs.com Reported vulnerable to Drown
> 
> This is a 5208 That was converted from 5108 via the update script,
> However its yummed up to date.

Hmmm ... please disable SSL for that Vsite, save and then enable SSL
again. Next see if SSL-Labs still reports the vulnerability to Drown.

It could be that during the transition from 5108R to 5208R the script ...

/usr/sausalito/sbin/SSL_fixer.pl

... had not been run, which forces a write out of the updated SSL
settings to the individual Vsite Apache configs.

-- 
With best regards

Michael Stauber
_______________________________________________
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

Reply via email to