A Quick note on POODLE


(TheJames) #1

For FreePBX:

We don’t enable SSL. If you do enable SSL, ensure that SSL 3.0 is disabled in your apache configuration.

You can make sure that this is done by adding the following line to your SSL Virtualhost:

SSLProtocol all -SSLv2 -SSLv3

For further information, you can read the following two links

http://wiki.centos.org/HowTos/Https
https://www.centos.org/forums/viewtopic.php?f=17&t=49029

For Asterisk:
http://seclists.org/fulldisclosure/2014/Oct/93

The latest Asterisk builds with the fixes included are in the repos for FreePBX distro users.