[prev in list] [next in list] [prev in thread] [next in thread] 

List:       linux-poweredge
Subject:    Re: [Linux-PowerEdge] Openmanage SSLv3 poodle vulnerability
From:       "Biel, Charles" <cbiel () uta ! edu>
Date:       2014-10-21 22:32:00
Message-ID: D06C477C.E3B9E%cbiel () exchange ! uta ! edu
[Download RAW message or body]

Hi John,

   My approach has been kind of heavy handed but it works
well enough to improve our security scan reports:

racadm config -g cfgRacTuning -o cfgRacTuneWebServerEnable 0

Reenable Web Server only as needed via ssh:

racadm config -g cfgRacTuning -o cfgRacTuneWebServerEnable 1


   Of course I=B9d like a more elegant fix and have a couple
Service Request calls pending on the issue.

Hope this helps,
Charles


On 10/16/14, 6:36 AM, "john" <lists@cloned.org.uk> wrote:

>Hi,
>How do you stop openmanage from using insecure SSL versions such as SSLv3
>following CVE-2014-3566?
>
>Also, does anyone know how you do this on an iDRAC5 and iDRAC6? :-)
>
>Thanks,
>
>John
>
>_______________________________________________
>Linux-PowerEdge mailing list
>Linux-PowerEdge@dell.com
>https://lists.us.dell.com/mailman/listinfo/linux-poweredge

_______________________________________________
Linux-PowerEdge mailing list
Linux-PowerEdge@dell.com
https://lists.us.dell.com/mailman/listinfo/linux-poweredge
[prev in list] [next in list] [prev in thread] [next in thread]