> On Jan 3, 2015, at 4:33 AM, Tim Bannister <[email protected]> wrote: > > IMO this is one for packagers (as well as anyone wishing to contribute > packaging patches). > > How did Traffic Server disable SSL – just an edit to the default > configuration, or code changes as well?
Both, sort of. Our configuration defaults are coded in one C++ file, so we changed the SSLv3 setting to be ‘0’ (off) in that file. We obviously already had support for various SSL settings in the code that deals with TLS handshakes etc. This default is then overridable via normal configuration files, as either distributed by package managers, or the person installing / managing the software. Cheers, — Leif > > -- > Tim Bannister - [email protected] > > > >> On 2 Jan 2015, at 19:38, Leif Hedstrom <[email protected]> wrote: >> >> We disabled SSLv3 in the defaults for Traffic Server as well. It's still >> available to be explicitly turned on though. >> >> -- Leif >
