Rebuilding Apache after SSLv3 fix

drp

• October 21, 2014 04:43

Hi, I'm attempting this fix for SSLv3 here:
Running ssl_cert_status reveals nothing. I've then tried running /scripts/rebuildhttpdconf but all that gave me was similar to this: [url=http://www.singlerack.com/info-rebuildhttpdconf-missing-owner-for-domain-force-lookup-to-root/]info [rebuildhttpdconf] Missing owner for domain, force lookup to root | SingleRack Hosting Solution, which I've now fixed. What should my next fix be? If I roll back the SSLv3 fix, everything is hunky-dory again and Apache restarts fine. Thanks, Clive

• 

  cPanelMichael

  • October 21, 2014 14:06

  Hello :) Please post the output from:
  rpm -qa | grep openssl cat /etc/redhat-release
  Also, post the contents from the /usr/local/apache/conf/includes/pre_main_global.conf file on your system. Thank you.

  0
• 

  drp

  • October 21, 2014 22:35

  Thanks for your help. Here you go:
  root@server1 [/]# rpm -qa | grep openssl openssl-1.0.1e-30.el6_5.2.x86_64 openssl-devel-1.0.1e-30.el6_5.2.x86_64 root@server1 [/]# cat /etc/redhat-release CentOS release 6.5 (Final) root@server1 [/]#
  and
  root@server1 [/usr/local/apache/conf/includes]# vi pre_main_global.conf SSLProtocol All -SSLv2 -SSLv3 SSLCipherSuite EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+ SSLHonorCipherOrder on ~
  

  0
• 

  drp

  • October 22, 2014 13:58

  While this doesn't fix the problem specifically, rather than make the SSLv3 fix in the link above, I've instead updated OpenSSL as fixed here:

  0
• 

  cPanelMichael

  • October 22, 2014 14:43

  I am happy to see you were able to address the issue. Note that our documentation here describes the steps you can take to address the weakness: How to Adjust Cipher Protocols Thank you.

  0

Please sign in to leave a comment.