[Spacewalk-list] Disabling SSL V2 and V3 based connection acceptance

[Zeal Vora]

Hi

The current SpaceWalk server accepts SSL V2 and V3 based protocol.  This is
also leading to vulnerability of MEDIUM class in our vulnerability
assessment tools.

What is the ideal way to disable those protocols in SpaceWalk ?

Ideally in Apache, we use SSLProtocol all -SSLv2 -SSLv3 in httpd.conf but
it would be great to know the most ideal steps for SpaceWalk.



Thanks,
Zeal
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/spacewalk-list/attachments/20160715/5ad8157e/attachment.htm>