MRatWork Forum by Mustafa Ramadhan - This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

Sponsor:
Server and Web Integrator
Link:
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:

MRatWork Forum | Please login or register. | 2017-11-08, 00:17:51

- MRatWork Forum by Mustafa Ramadhan »
- Language Specific Discussions »
- Indonesia Users »
- This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

« previous next »

- Print

Pages: [1] Go Down

### Author Topic: This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi (Read 1954 times)

0 Members and 1 Guest are viewing this topic.

#### ar1246

- Senior Member
- Posts: 234
- Karma: +0/-0
- Gender:

##### This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

« on: 2015-02-02, 23:31:18 »
Pak, menindak lanjuti pemasangan ssl pada webmail, saya coba isntall ssl di web utamanya pake ssl trial comodo.
ternyata sama koneksi reset lg.
saya switch webserver yg tadinya hiawatha proxy ke apache, nah ternyata jadi bisa di akses pak.
tapi pas di cek di ssllabs katanya "This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate. Grade capped to C"
ini knapa y pak?
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

« Reply #1 on: 2015-02-03, 00:46:03 »
Apa anda sudah pakai Kloxo-MR 7?. Ini karena di Kloxo-MR, SSL3 sudah di-disable.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### ar1246

- Senior Member
- Posts: 234
- Karma: +0/-0
- Gender:

##### Re: This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

« Reply #2 on: 2015-02-03, 08:20:02 »
pake 7 pak
Code: [Select]

    A. Kloxo-MR: 7.0.0.b-2015012701
    B. OS: CentOS release 6.6 (Final) i686
    C. Apps:
       1. MySQL: mysql55-5.5.41-2.ius.el6.i686
       2. PHP: php53u-5.3.29-1.ius.el6.i686
       3. Httpd: httpd-2.2.29-1.mr.el6.i386
       4. Lighttpd: --uninstalled--
       5. Hiawatha: hiawatha-9.11.0-f.2.mr.el6.i386
       6. Nginx: --uninstalled--
       7. Cache: --uninstalled--
       8. Dns: nsd-4.1.0-3.mr.el6.i386
       9. Qmail: qmail-toaster-1.03-1.3.46.mr.el6.i386
          - with: courier-imap-toaster-4.1.2-1.3.18.mr.el6.i386
    D. Php-type (for Httpd/proxy): php-fpm_event
    E. Memory:
                    total       used       free     shared    buffers     cached
       Mem:          1893       1426        466         78        229        725
       -/+ buffers/cache:        471       1421
       Swap:          255          0        255

tapi gk akan ada efek sampingnya pak?
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

« Reply #3 on: 2015-02-03, 11:16:26 »
Kalau pakai hiawatha-proxy atau nginx-proxy bagaimana hasilnya?.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### GentZu

- Senior Member
- Posts: 323
- Karma: +0/-0
- Gender:
- yare yare...

##### Re: This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

« Reply #4 on: 2015-02-03, 14:01:17 »
hiawatha-proxy atau hiawatha only gk bisa pakek ssl, ini bugs lama yg gk pernah di fix sampai kloxomr ....
coba pakek nginx-poxy atau nginx only...
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

« Reply #5 on: 2015-02-03, 16:22:33 »
Secara umum ada 3 file certificate, yaitu:
1. .crt --> file certificate
2. .key --> key / private; bisa digenerate melalui self-assign
3. .ca --> dari vendor SSL; bisa merupakan gabungan beberap .ca (di-chain)
dimana gabungan 1 dan 2 akan menjadi .pem.
Setting di webserver:
1. Hiawatha
SSLcertFile .pem
RequiredCA .ca
2. Apache
SSLCertificateFile .pem
SSLCertificateKeyFile .key
SSLCACertificatefile .ca
3. Nginx
ssl_certificate .pem;
ssl_certificate_key .key;
ssl_trusted_certificate .ca;
Hiawatha tidak memerlukan .key karena .pem adalah gabungan .crt dan .key.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### ar1246

- Senior Member
- Posts: 234
- Karma: +0/-0
- Gender:

##### Re: This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

« Reply #6 on: 2015-02-09, 03:22:53 »
Quote from: GentZu on 2015-02-03, 14:01:17

> hiawatha-proxy atau hiawatha only gk bisa pakek ssl, ini bugs lama yg gk pernah di fix sampai kloxomr ....
> coba pakek nginx-poxy atau nginx only...

Pak MR, kang GentZu bener. SSL pake hiawatha / hiawatha proxy gk bisa pak. ini saya pake nginx proxy
Sayang skali padahal sya ngfans hiawatha proxy
Logged

#### GentZu

- Senior Member
- Posts: 323
- Karma: +0/-0
- Gender:
- yare yare...

##### Re: This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

« Reply #7 on: 2015-02-09, 18:16:44 »
Quote from: ar1246 on 2015-02-09, 03:22:53

> Pak MR, kang GentZu bener. SSL pake hiawatha / hiawatha proxy gk bisa pak. ini saya pake nginx proxy
> Sayang skali padahal sya ngfans hiawatha proxy

iya padahal saya juga suka hiawtha, ntah kenapa gk work di kloxomr7 beta, mungkin kalau yg versi final bisa jalan...
dan masih ada 2 lagi bugs yg berhubungan dengan SSL, saya juga sudah kasih report di post2 sebelumnya...
Logged

- Print

Pages: [1] Go Up
« previous next »

- MRatWork Forum by Mustafa Ramadhan »
- Language Specific Discussions »
- Indonesia Users »
- This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mi

Top 10 Social Networking: Facebook Twitter LinkedIn Pinterest Google Plus Tumblr Instagram VK Flickr Vine

..:: Monetize Your Website with ylliXmedia ::.. ..:: Online Advertising that Sale Anything with ylliXmedia ::..

- Design By SMFSimple.com
- SMF 2.0.14 | SMF © 2017, Simple Machines

Page created in 0.04 seconds with 18 queries.

Mirror created by MasterkinG32.CoM