Skip to content

Instantly share code, notes, and snippets.

@bernardeli

bernardeli/poodle.md

Last active August 29, 2015 14:07
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bernardeli/135e356693ff33b2d891 to your computer and use it in GitHub Desktop.
Save bernardeli/135e356693ff33b2d891 to your computer and use it in GitHub Desktop.
Download ZIP
SSLv3 POODLE nginx update
Raw
poodle.md

Test if your domain is vulnerable

openssl s_client -connect scouterecruitstaging.com:443 -ssl3

If you see a long response whereby the server certificate is shown, you do need to action.

If you see something like the next line, your server is fine:

58003:error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure

Update nginx

Find the file where ssl_protocols directive is:

cd /etc/nginx
grep -rin ssl_protocols .

Update from ssl_protocols SSLv2 SSLv3 TLSv1; to ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

If you don't find any ssl_protocols, please add.

Restart nginx: sudo service nginx restart

Re-test with the first command.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment