Prevent POODLE vulnerability in HAProxy router

HAProxy 1.5.14 is now available and used by the router image.
openshift · Feb 25, 2016 · 0ea0d1b · 0ea0d1b
1 parent 2b7b4bb
commit 0ea0d1b
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/images/router/haproxy/conf/haproxy-config.template b/images/router/haproxy/conf/haproxy-config.template
@@ -14,8 +14,7 @@ global
   stats timeout 2m
 
   # Prevent vulnerability to POODLE attacks
-  # TODO: use when 1.5.14 is available
-  # ssl-default-bind-options no-sslv3
+  ssl-default-bind-options no-sslv3
 
   # Modern cipher suite (no legacy browser support) from https://wiki.mozilla.org/Security/Server_Side_TLS
   # tune.ssl.default-dh-param 2048