[SERVER-15673] Disable SSLv3 ciphers Created: 15/Oct/14  Updated: 30/Jan/23  Resolved: 15/Oct/14

Status: Closed
Project: Core Server
Component/s: Networking, Security
Affects Version/s: 2.4.11, 2.6.5, 2.7.7
Fix Version/s: 2.4.13, 2.6.6, 2.7.8

Type: Improvement Priority: Major - P3
Reporter: Andreas Nilsson Assignee: Andreas Nilsson
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Related
Tested
Backport Completed:
Sprint: Security [00-02-20-15]
Participants:
Case:

 Description   

Even though the POODLE problem doesn't apply to MongoDB directly we can just as well disable all SSLv3 to avoid any unnecessary discussions.



 Comments   
Comment by Githook User [ 28/Oct/14 ]

Author:

{u'username': u'monkey101', u'name': u'Dan Pasette', u'email': u'dan@10gen.com'}

Message: SERVER-15673 fix typo in backport
Branch: v2.4
https://github.com/mongodb/mongo/commit/656f78711632a5dc37221422c99e3c4619bcc58f

Comment by Githook User [ 28/Oct/14 ]

Author:

{u'username': u'monkey101', u'name': u'Dan Pasette', u'email': u'dan@10gen.com'}

Message: SERVER-15673 Disable SSLv3 ciphers (CVE-2014-3566 "POODLE")

(cherry picked from commit 035b5a90f56d653e930fcbe20c89f4dda7e48a30)
Branch: v2.4
https://github.com/mongodb/mongo/commit/8b9242837510e6410ddcf4f19969da4c7b01b2f7

Comment by Githook User [ 28/Oct/14 ]

Author:

{u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}

Message: SERVER-15673 Disable SSLv3 ciphers (CVE-2014-3566 "POODLE")

(cherry picked from commit bdee10aed8691579d17300a1235edce8742ef6dd)
Branch: v2.6
https://github.com/mongodb/mongo/commit/035b5a90f56d653e930fcbe20c89f4dda7e48a30

Comment by Githook User [ 15/Oct/14 ]

Author:

{u'username': u'agralius', u'name': u'Andreas Nilsson', u'email': u'andreas.nilsson@10gen.com'}

Message: SERVER-15673 Disable SSLv3 ciphers (CVE-2014-3566 "POODLE")
Branch: master
https://github.com/mongodb/mongo/commit/bdee10aed8691579d17300a1235edce8742ef6dd

Generated at Thu Feb 08 03:38:39 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.