SSLv3 POODLE nginx update

poodle.md

Test if your domain is vulnerable

openssl s_client -connect scouterecruitstaging.com:443 -ssl3

If you see a long response whereby the server certificate is shown, you do need to action.

If you see something like the next line, your server is fine:

58003:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

Update nginx

Find the file where ssl_protocols directive is:

cd /etc/nginx
grep -rin ssl_protocols .

Update from ssl_protocols SSLv2 SSLv3 TLSv1; to ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

If you don't find any ssl_protocols, please add.

Restart nginx: sudo service nginx restart

Re-test with the first command.