16 Oct
2014
16 Oct
'14
2:29 p.m.
Andy said:
there are over 150 customer IPs at BitFolk that are
still
supporting SSLv3 on port 443.
A reminder that your webserver may not be the only thing listening out
for https connections on some port or other.
By default Webmin uses 10000 and if you use it..
.. check https://yourdomain.whatever:10000 and you'll see it'll accept
SSLv3.
The current fix is to add
ssl_version=10
to /etc/webmin/miniserv.conf and then restart webmin but that may
enforce TLSv1 rather than allowing any other TLS version (the
documentation of the SSLeay library doesn't make that clear).
Doubtless (?) there will be a proper fix soon.
cPanel and other such software almost certainly has a similar issue
and fix.
Ian