[SERVER-15673] Disable SSLv3 ciphers Created: 15/Oct/14 Updated: 30/Jan/23 Resolved: 15/Oct/14 |
|
| Status: | Closed |
| Project: | Core Server |
| Component/s: | Networking, Security |
| Affects Version/s: | 2.4.11, 2.6.5, 2.7.7 |
| Fix Version/s: | 2.4.13, 2.6.6, 2.7.8 |
| Type: | Improvement | Priority: | Major - P3 |
| Reporter: | Andreas Nilsson | Assignee: | Andreas Nilsson |
| Resolution: | Done | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||
| Backport Completed: | |||||||||
| Sprint: | Security [00-02-20-15] | ||||||||
| Participants: | |||||||||
| Case: | (copied to CRM) | ||||||||
| Description |
|
Even though the POODLE problem doesn't apply to MongoDB directly we can just as well disable all SSLv3 to avoid any unnecessary discussions. |
| Comments |
| Comment by Githook User [ 28/Oct/14 ] |
|
Author: {u'username': u'monkey101', u'name': u'Dan Pasette', u'email': u'dan@10gen.com'}Message: |
| Comment by Githook User [ 28/Oct/14 ] |
|
Author: {u'username': u'monkey101', u'name': u'Dan Pasette', u'email': u'dan@10gen.com'}Message: (cherry picked from commit 035b5a90f56d653e930fcbe20c89f4dda7e48a30) |
| Comment by Githook User [ 28/Oct/14 ] |
|
Author: {u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}Message: (cherry picked from commit bdee10aed8691579d17300a1235edce8742ef6dd) |
| Comment by Githook User [ 15/Oct/14 ] |
|
Author: {u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}Message: |