diff --git a/install/tpl/apache_ispconfig.vhost.master b/install/tpl/apache_ispconfig.vhost.master index 4973af083cf1491d5ad87e437de2806e625dc471..3619e16b6e528df3a4702d17a66d7916e747e73c 100644 --- a/install/tpl/apache_ispconfig.vhost.master +++ b/install/tpl/apache_ispconfig.vhost.master @@ -63,6 +63,7 @@ NameVirtualHost *: # SSL Configuration SSLEngine On + SSLProtocol All -SSLv2 -SSLv3 SSLCertificateFile /usr/local/ispconfig/interface/ssl/ispserver.crt SSLCertificateKeyFile /usr/local/ispconfig/interface/ssl/ispserver.key SSLCACertificateFile /usr/local/ispconfig/interface/ssl/ispserver.bundle diff --git a/install/tpl/nginx_ispconfig.vhost.master b/install/tpl/nginx_ispconfig.vhost.master index 931bc616269990b23564bcecf02e8c9b440a27e0..70d6a53b590e3b50ed5e9fa32f552e7cc33a6f65 100644 --- a/install/tpl/nginx_ispconfig.vhost.master +++ b/install/tpl/nginx_ispconfig.vhost.master @@ -1,6 +1,7 @@ server { listen {vhost_port}; ssl {ssl_on}; + {ssl_comment}ssl_protocols TLSv1 TLSv1.1 TLSv1.2; {ssl_comment}ssl_certificate /usr/local/ispconfig/interface/ssl/ispserver.crt; {ssl_comment}ssl_certificate_key /usr/local/ispconfig/interface/ssl/ispserver.key; diff --git a/server/conf/nginx_vhost.conf.master b/server/conf/nginx_vhost.conf.master index 6e3d853245da0a7da04798ac616392949547df0f..cb9f628b1b55871d3c3c69e2e48b90cceacf4df1 100644 --- a/server/conf/nginx_vhost.conf.master +++ b/server/conf/nginx_vhost.conf.master @@ -6,6 +6,7 @@ server { listen :443 ssl; + ssl_protocols TLSv1 TLSv1.1 TLSv1.2; listen []:443 ssl; diff --git a/server/conf/vhost.conf.master b/server/conf/vhost.conf.master index 16e0d12160fe2d2e660e84341730ca4b6382169a..23cec4711e9b1a1820ef5cd7d904148b78e156c0 100644 --- a/server/conf/vhost.conf.master +++ b/server/conf/vhost.conf.master @@ -47,7 +47,8 @@ - SSLEngine on + SSLEngine on + SSLProtocol All -SSLv2 -SSLv3 SSLCertificateFile /ssl/.crt SSLCertificateKeyFile /ssl/.key