cPanel disable SSL 3

If you are afraid of POODLE Attack, you should disable SSL v3. You can use this ansible playbook:


– hosts: test
remote_user: root

tasks:
– lineinfile: dest=/usr/local/apache/conf/includes/pre_main_global.conf line=”#Turn off SSL v3 support\nSSLProtocol All -SSLv2 -SSLv3\nSSLHonorCipherOrder On\n” insertafter=BOF
– name: rebuild httpd confs
command: /scripts/rebuildhttpdconf
notify:
– restart httpd
– name: ensure apache is running
service: name=httpd state=started

handlers:
– name: restart httpd
service: name=httpd state=restarted

Leave a Reply

Your email address will not be published. Required fields are marked *