Skip to main content

Public

Project privacy set to public. By default, its content is available to everyone (authenticated or not). Please note that more restrictive permissions might exist on some items.

    •  
      request #7999 Default Apache conf provided with Tuleap still allow SSLv3 and weak ciphers
    Actions
    Infos
    #7999
    Thomas Gerbet (tgerbet)
    2015-06-29 09:39
    2015-04-13 16:56
    8018
    Details
    Default Apache conf provided with Tuleap still allow SSLv3 and weak ciphers
    The configuration file provided by Tuleap is outdated and allow the use of deprecated protocol and/or weak ciphers.

    References
    CVE-2014-3566
    CVE-2011-3389
    Installation process
    All
    Empty
    • [ ] enhancement
    • [ ] internal improvement
    Empty
    Stage
    Empty
    Closed
    2015-06-29
    Attachments
    Artifact links
    Empty
    Empty
    References
    Referencing request #7999

    Artifact Tracker v5

    rel #8180 8.4

    Git commit

    tuleap/tuleap/stable

    Merge commit 'refs/changes/63/3863/4' of ssh://gerrit.tuleap.net:29418/tuleap into HEAD d6512e11e6
    User avatar Yannis ROSSETTO (rossettoy) , 2015-06-29 09:37
    request #7999: Disallow SSLv3 and weak ciphers in the default Apache configuration 78839f29ec
    User avatar Thomas Gerbet (tgerbet) , 2015-06-26 16:04
    Referenced by request #7999

    Other

    gerrit #3863
    Display settings

    Follow-ups

    User avatar
    Yannis ROSSETTO (rossettoy)2015-06-29 09:39
    Merged in Tuleap 8.3.99.5
    • Status changed from Under review to Closed
    • Close date set to 2015-06-29