Merge pull request #563 from rafael/patch-1

Update kong.yml to protect from POODLE ssl attack.
Kong · Sep 29, 2015 · 632886f · 632886f
2 parents 8e96825 + 9579515
commit 632886f
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/kong.yml b/kong.yml
@@ -144,6 +144,7 @@ nginx: |
 
       ssl_certificate {{ssl_cert}};
       ssl_certificate_key {{ssl_key}};
+      ssl_protocols TLSv1 TLSv1.1 TLSv1.2;# omit SSLv3 because of POODLE (CVE-2014-3566)
 
       location / {
         default_type 'text/plain';