Explicitly exclude SSLv3 in older oraclehttp versions

mozilla · Oct 17, 2024 · 3f90705 · 3f90705
1 parent ea1349d
commit 3f90705
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/templates/partials/oraclehttp.hbs b/src/templates/partials/oraclehttp.hbs
@@ -18,7 +18,7 @@
 </VirtualHost>
 
 # {{form.config}} configuration
-SSLProtocol             All {{#unless (includes "TLSv1" output.protocols)}}-TLSv1{{/unless}}{{#unless (includes "TLSv1.1" output.protocols)}} -TLSv1.1{{/unless}}
+SSLProtocol             All{{#unless (minver "12.2.1" form.serverVersion)}} -SSLv3{{/unless}}{{#unless (includes "TLSv1" output.protocols)}} -TLSv1{{/unless}}{{#unless (includes "TLSv1.1" output.protocols)}} -TLSv1.1{{/unless}}
 SSLCipherSuite          {{{join output.ciphers ":"}}}
 {{#if (minver "12.2.1" form.serverVersion)}}
 SSLHonorCipherOrder     {{#if output.serverPreferredOrder}}on{{else}}off{{/if}}