Quick Ansible Poodle (CVE-2014-3566) fix (RHEL/CentOS)

gistfile1.txt

---
- hosts: all
  gather_facts: false
  tasks:
    - name: Check for apache
      command: rpm -q mod_ssl
      register: modssl
      ignore_errors: true

    - name: Ensure openssl is latest
      yum: name=openssl state=latest
      when: modssl|success

    - name: Ensure SSLv3 is disabled
      lineinfile: dest=/etc/httpd/conf.d/ssl.conf
                  regexp=^SSLProtocol
                  line="SSLProtocol all -SSLv2 -SSLv3"
                  state=present
      when: modssl|success
      notify: restart apache

  handlers:
    - name: restart apache
      service: name=httpd state=restarted