Prevent POODLE vulnerability in HAProxy router

HAProxy 1.5.14 is now available and used by the router image.
openshift · Jun 14, 2016 · d51939b · d51939b
1 parent 2326e1e
commit d51939b
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/images/router/haproxy/conf/haproxy-config.template b/images/router/haproxy/conf/haproxy-config.template
@@ -17,8 +17,7 @@ global
  stats timeout 2m
 
  # Prevent vulnerability to POODLE attacks
- # TODO: use when 1.5.14 is available
- # ssl-default-bind-options no-sslv3
+ ssl-default-bind-options no-sslv3
 
  # Modern cipher suite (no legacy browser support) from https://wiki.mozilla.org/Security/Server_Side_TLS
  # tune.ssl.default-dh-param 2048