Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [poodle]

37 questions
0
votes
1 answer

Nginx reverting to sslv3

I'm using nginx as a reverse proxy and I'm trying to turn off sslv3 support. I have found various answers both on here and other various sites. They all suggest all I need to do is add something like the following to the default http block in my…
Drifter104
  • 3,773
  • 2
  • 25
  • 39
0
votes
0 answers

Glassfish 3 unable to deactivate SSL3 for IIOP

I'm running Glassfish 3.1.2.2 and want to disable SSL3 for the IIOP ports (default 3820 and 3920). I…
Cryn
  • 101
  • 1
0
votes
0 answers

How to configure Coldfusion 10 CFLDAP to use TLS instead of SSL2

We are using CFLDAP to authenticate users from a remote system. The remote system has now shut down SSL 2 and 3 due to the POODLE issue. Is there a way to configure either Coldfusion or Tomcat to use TLS as the outgoing connection?
JamesS
  • 1
  • 1
0
votes
1 answer

Getting the right Ciphers for UCSPI SSL

I am currently trying to secure my qmail installation and the SMTP connections. When compiling the standard UCSPI SSL, all supported ciphers are enabled by default. This leads to problems with POODLE, heartblead and other SSL problems. I set an…
David
  • 159
  • 8
0
votes
1 answer

Disabled SSLv3 on Apache, but still using it to send to other websites?

I followed the instructions for CentOS 6 to disable SSL v3 in Apache (2.2.15, not sure how much that matters), but it appears to only disable it for incoming clients, not outgoing requests (such as to authorize.net for credit card transactions). I'm…
Davicus
  • 9
  • 1
0
votes
1 answer

Does DB2 accept SSL3 connections?

Does DB2 allow connection through Secure Sockets Layer version 3 (SSL3)? To be more exact, will a program using SSL3 connection get an access to DB2? or will it fail? If it does accept it, is there away to disable it?
M. A. Kishawy
  • 109
  • 4
0
votes
1 answer

Disabled SSLv3 in Windows registry but still showing POODLE vulnerability

Windows server 2016 Standard. Recently we've been getting hit by brute force attempt using POODLE. I did a little research and found we should disable SSLv3. However, when I go…
00fruX
  • 123
  • 1
  • 9
1 2
3