Index: docs/conf/extra/httpd-ssl.conf.in =================================================================== --- docs/conf/extra/httpd-ssl.conf.in (revision 1633332) +++ docs/conf/extra/httpd-ssl.conf.in (working copy) @@ -86,8 +86,9 @@ # SSL Protocol support: # List the protocol versions which clients are allowed to -# connect with. Disable SSLv2 by default (cf. RFC 6176). -SSLProtocol all -SSLv2 +# connect with. Disable SSLv2 (cf. RFC 6176) and SSLv3 +# (cf. CVE 2014-3566). +SSLProtocol all -SSLv2 -SSLv3 # SSL Cipher Suite: # List the ciphers that the client is permitted to negotiate.