Repository: trafficserver Updated Branches: refs/heads/master a6adef4b1 -> 3e64d405c
TS-3135 Disable SSLv3 by default. Project: http://git-wip-us.apache.org/repos/asf/trafficserver/repo Commit: http://git-wip-us.apache.org/repos/asf/trafficserver/commit/3e64d405 Tree: http://git-wip-us.apache.org/repos/asf/trafficserver/tree/3e64d405 Diff: http://git-wip-us.apache.org/repos/asf/trafficserver/diff/3e64d405 Branch: refs/heads/master Commit: 3e64d405cc30d2400b682960ee52eeababdef17f Parents: a6adef4 Author: Leif Hedstrom <[email protected]> Authored: Tue Oct 14 21:03:31 2014 -0600 Committer: Leif Hedstrom <[email protected]> Committed: Tue Oct 14 21:03:31 2014 -0600 ---------------------------------------------------------------------- CHANGES | 3 +++ mgmt/RecordsConfig.cc | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/trafficserver/blob/3e64d405/CHANGES ---------------------------------------------------------------------- diff --git a/CHANGES b/CHANGES index b585acf..100261c 100644 --- a/CHANGES +++ b/CHANGES @@ -1,6 +1,9 @@ -*- coding: utf-8 -*- Changes with Apache Traffic Server 5.2.0 + *) [TS-3135] Disable SSLv3 by default. This can be enabled again by adding a + line to records.config for proxy.config.ssl.SSLv3. + *) [TS-3129] Parent proxy configuration does not work for incoming HTTPS requests *) [TS-3127] Add config for OpenSSL session cache auto clear http://git-wip-us.apache.org/repos/asf/trafficserver/blob/3e64d405/mgmt/RecordsConfig.cc ---------------------------------------------------------------------- diff --git a/mgmt/RecordsConfig.cc b/mgmt/RecordsConfig.cc index 59c4f73..eae41ce 100644 --- a/mgmt/RecordsConfig.cc +++ b/mgmt/RecordsConfig.cc @@ -1226,7 +1226,7 @@ RecordElement RecordsConfig[] = { , {RECT_CONFIG, "proxy.config.ssl.SSLv2", RECD_INT, "0", RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-1]", RECA_NULL} , - {RECT_CONFIG, "proxy.config.ssl.SSLv3", RECD_INT, "1", RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-1]", RECA_NULL} + {RECT_CONFIG, "proxy.config.ssl.SSLv3", RECD_INT, "0", RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-1]", RECA_NULL} , {RECT_CONFIG, "proxy.config.ssl.TLSv1", RECD_INT, "1", RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-1]", RECA_NULL} ,
