Skip to content

Instantly share code, notes, and snippets.

@bernardeli
Last active August 29, 2015 14:07
Show Gist options
  • Save bernardeli/135e356693ff33b2d891 to your computer and use it in GitHub Desktop.
Save bernardeli/135e356693ff33b2d891 to your computer and use it in GitHub Desktop.
SSLv3 POODLE nginx update

Test if your domain is vulnerable

openssl s_client -connect scouterecruitstaging.com:443 -ssl3

If you see a long response whereby the server certificate is shown, you do need to action.

If you see something like the next line, your server is fine:

58003:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

Update nginx

Find the file where ssl_protocols directive is:

cd /etc/nginx
grep -rin ssl_protocols .

Update from ssl_protocols SSLv2 SSLv3 TLSv1; to ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

If you don't find any ssl_protocols, please add.

Restart nginx: sudo service nginx restart

Re-test with the first command.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment