How to secure Proxmox VE server against the poodle SSL attack?

[Riverman]

Hi,
How should I secure my Proxmox VE 3.3 against the Poodle SSL attack?

I did following; but I'm not sure what else needed to be done?

nano /etc/apache2/mods-available/ssl.conf

-SSLProtocol all -SSLv2
+SSLProtocol all -SSLv2 -SSLv3

Then I restarted Apache:

service apache2 restart

Do we need to do any more?

Best regards
Måns Åman, Riverman

 

[sumsum]

If you dont need Apache2, remove it from the Proxmox VE Host.
check your apache https://ssltools.geotrust.com/checker/views/certCheck.jsp

 

[Riverman]

If you don't need Apache 2, remove it from the Proxmox VE Host.

What process handles Proxmox VE web interface? Isn't it Apache?

 

[sumsum]

With the release of Proxmox VE 3.0 back in May 2013, the Proxmox VE web interface does no longer require Apache. Instead, they’re using now a new event driven API server called pveproxy

 

[dietmar]

The proposed fix is here:

https://git.proxmox.com/?p=pve-manager.git;a=commitdiff;h=434e314196efeb74d1247f32077da55429acc527

 

[Riverman]

Aha, thank you!