Skip to content

Instantly share code, notes, and snippets.

@jtimberman

jtimberman/attributes-default.rb Secret

Last active August 29, 2015 14:07
Show Gist options
  • Save jtimberman/33b348a1f3b94051f3a2 to your computer and use it in GitHub Desktop.
Save jtimberman/33b348a1f3b94051f3a2 to your computer and use it in GitHub Desktop.
Download ZIP
some handy hints for mitigating SSLv3 "POODLE" attack with Chef
Raw
attributes-default.rb
# this is a default attribute in your cookbook's attributes/default.rb
node.default['webserver']['ssl_protocols'] = 'TLSv1 TLSv1.1 TLSv1.2'
# Or, make it an array, then you can .join it...
node.default['webserver']['ssl_protocols'] = ['TLSv1', 'TLSv1.1', 'TLSv1.2']
Raw
nginx.conf.erb
# if you used a space-separated string:
ssl_protocols <%= node['webserver']['ssl_protocols'].split.join(' ') %>;
# if you used an array:
ssl_protocols <%= node['webserver']['ssl_protocols'].join(' ') %>;
Raw
your-apache.conf.erb
# if you used a space-separated string:
SSLProtocol -ALL +<%= node['webserver']['ssl_protocols'].split.join(' +') %>
# if you used an array:
SSLProtocol -ALL +<%= node['webserver']['ssl_protocols'].join(' +') %>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment