wok rev 18584

apache: disable SSLSessionCache
author Pascal Bellard <pascal.bellard@slitaz.org>
date Thu Nov 12 16:05:44 2015 +0100 (2015-11-12)
parents 32cd19a15111
children bcccafbf2c8a
files apache/receipt
line diff
     1.1 --- a/apache/receipt	Thu Nov 12 11:40:39 2015 +0200
     1.2 +++ b/apache/receipt	Thu Nov 12 16:05:44 2015 +0100
     1.3 @@ -22,7 +22,6 @@
     1.4  # Rules to configure and make the package.
     1.5  compile_rules()
     1.6  {
     1.7 -	cd $src
     1.8  	grep -q Slitaz config.layout || \
     1.9  		cat $stuff/slitaz.layout >> config.layout
    1.10  	./configure --mandir=/usr/share/man \
    1.11 @@ -59,6 +58,7 @@
    1.12  		-e 's|#LoadModule ssl_module|LoadModule ssl_module|' \
    1.13  		$fs/etc/apache/httpd.conf $fs/etc/apache/extra/httpd-ssl.conf
    1.14  	echo "Include /etc/apache/conf.d" >> $fs/etc/apache/httpd.conf
    1.15 +	sed -i 's/^SSLSessionCache /#&/' $fs/etc/apache/extra/httpd-ssl.conf
    1.16  	cat >> $fs/etc/apache/extra/httpd-ssl.conf <<EOT
    1.17  
    1.18  # Unsafe, see CVE-2014-3566 POODLE