Repository: trafficserver Updated Branches: refs/heads/5.1.x 2d4a9686c -> 48c98554e
TS-3135 Disable SSLv3 by default. Project: http://git-wip-us.apache.org/repos/asf/trafficserver/repo Commit: http://git-wip-us.apache.org/repos/asf/trafficserver/commit/48c98554 Tree: http://git-wip-us.apache.org/repos/asf/trafficserver/tree/48c98554 Diff: http://git-wip-us.apache.org/repos/asf/trafficserver/diff/48c98554 Branch: refs/heads/5.1.x Commit: 48c98554e8dfedf3b7d8fdfd1ec0fa65558165b8 Parents: 2d4a968 Author: Leif Hedstrom <[email protected]> Authored: Tue Oct 14 21:03:31 2014 -0600 Committer: Alan M. Carroll <[email protected]> Committed: Tue Oct 28 11:21:14 2014 -0500 ---------------------------------------------------------------------- CHANGES | 3 +++ mgmt/RecordsConfig.cc | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/trafficserver/blob/48c98554/CHANGES ---------------------------------------------------------------------- diff --git a/CHANGES b/CHANGES index e6ceb52..7fcb1b8 100644 --- a/CHANGES +++ b/CHANGES @@ -3,6 +3,9 @@ Changes with Apache Traffic Server 5.1.1 *) [TS-2677] Fix potential open relay problem with CONNECT and remap. + *) [TS-3135] Disable SSLv3 by default. This can be enabled again by adding a + line to records.config for proxy.config.ssl.SSLv3. + Changes with Apache Traffic Server 5.1.0 *) [TS-3066] Fix various build issues for OmniOS, broken since 5.0.x. http://git-wip-us.apache.org/repos/asf/trafficserver/blob/48c98554/mgmt/RecordsConfig.cc ---------------------------------------------------------------------- diff --git a/mgmt/RecordsConfig.cc b/mgmt/RecordsConfig.cc index 0146cf9..2f78e31 100644 --- a/mgmt/RecordsConfig.cc +++ b/mgmt/RecordsConfig.cc @@ -1224,7 +1224,7 @@ RecordElement RecordsConfig[] = { , {RECT_CONFIG, "proxy.config.ssl.SSLv2", RECD_INT, "0", RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-1]", RECA_NULL} , - {RECT_CONFIG, "proxy.config.ssl.SSLv3", RECD_INT, "1", RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-1]", RECA_NULL} + {RECT_CONFIG, "proxy.config.ssl.SSLv3", RECD_INT, "0", RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-1]", RECA_NULL} , {RECT_CONFIG, "proxy.config.ssl.TLSv1", RECD_INT, "1", RECU_RESTART_TS, RR_NULL, RECC_INT, "[0-1]", RECA_NULL} ,
