Ssl2 + ssl3 disable: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
(Die Seite wurde neu angelegt: „=Apache2 SSLv3 deactivate= *cat /etc/apache2/httpd.conf SSLProtocol ALL -SSLv2 -SSLv3 =Dovecot SSLv3 deactivate= *cat /etc/dovecot/conf.d/10-ssl.conf ssl_p…“)
 
 
(13 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt)
Zeile 1: Zeile 1:
=Apache2 SSLv3 deactivate=
+
=Configs=
*cat /etc/apache2/httpd.conf
+
*[[Apache2 SSLv3 deactivate]]
SSLProtocol ALL -SSLv2 -SSLv3
+
*[[Nginx SSLv3 deactivate]]
=Dovecot SSLv3 deactivate=
+
*[[Dovecot SSLv3 deactivate]]
*cat /etc/dovecot/conf.d/10-ssl.conf
+
*[[Postfix SSLv3 deactivate]]
ssl_protocols = !SSLv2 !SSLv3
+
*[[Openldap SSLv3 deactivate]]
=Postfix SSLv3 deactivate=
+
 
*cat /etc/postfix/main.cf
+
 
smtpd_tls_mandatory_protocols = !SSLv2 !SSLv3
+
=Tests=
smtp_tls_mandatory_protocols = !SSLv2 !SSLv3
+
==Apache2==
smtp_tls_protocols = !SSLv2, !SSLv3
+
*openssl s_client -ssl3 -connect www.example.com:443
smtpd_tls_protocols = !SSLv2 !SSLv3
+
==Dovecot==
 +
*openssl s_client -ssl3 -connect www.example.com:993
 +
==Postfix==
 +
===smtps===
 +
*openssl s_client -ssl3 -connect www.example.com:465
 +
===submission===
 +
*openssl s_client -ssl3 -connect www.example.com:587
 +
 
 +
 
  
 
=Source=
 
=Source=
 
*https://www.heinlein-support.de/blog/security/deaktivieren-sie-sslv3-apachepostfixdovecot-poodle-bug/
 
*https://www.heinlein-support.de/blog/security/deaktivieren-sie-sslv3-apachepostfixdovecot-poodle-bug/
 +
*https://wiki.dovecot.org/SSL/DovecotConfiguration

Aktuelle Version vom 6. November 2018, 14:41 Uhr

Configs


Tests

Apache2

  • openssl s_client -ssl3 -connect www.example.com:443

Dovecot

  • openssl s_client -ssl3 -connect www.example.com:993

Postfix

smtps

  • openssl s_client -ssl3 -connect www.example.com:465

submission

  • openssl s_client -ssl3 -connect www.example.com:587


Source