diff -ruN e-smith-base-5.2.0.old/root/etc/e-smith/db/configuration/defaults/modSSL/CipherSuite e-smith-base-5.2.0/root/etc/e-smith/db/configuration/defaults/modSSL/CipherSuite --- e-smith-base-5.2.0.old/root/etc/e-smith/db/configuration/defaults/modSSL/CipherSuite 2014-01-13 20:15:16.000000000 -0800 +++ e-smith-base-5.2.0/root/etc/e-smith/db/configuration/defaults/modSSL/CipherSuite 1969-12-31 16:00:00.000000000 -0800 @@ -1 +0,0 @@ -HIGH:!SSLv2 diff -ruN e-smith-base-5.2.0.old/root/etc/e-smith/db/configuration/migrate/30CipherSuiteUpdate e-smith-base-5.2.0/root/etc/e-smith/db/configuration/migrate/30CipherSuiteUpdate --- e-smith-base-5.2.0.old/root/etc/e-smith/db/configuration/migrate/30CipherSuiteUpdate 2014-01-13 20:15:16.000000000 -0800 +++ e-smith-base-5.2.0/root/etc/e-smith/db/configuration/migrate/30CipherSuiteUpdate 2014-01-13 20:41:20.000000000 -0800 @@ -1,9 +1,9 @@ { - # Migrate old CipherSuite value to new secure default + # Remove CipherSuite if it is the last insecure value # Will not change CipherSuite if it has been modified from the original default, or deleted. return unless defined $modSSL{CipherSuite}; - if($modSSL{CipherSuite} eq 'ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM') + if($modSSL{CipherSuite} eq 'HIGH:!SSLv2') { - $DB->set_prop('modSSL', 'CipherSuite', 'HIGH:!SSLv2'); + $DB->get('modSSL')->delete_prop ('CipherSuite'); } }