James Leighton

Disabling SSLv3 in Lighttpd

To disable SSLv3 in Lighttpd to mitigate the Poodle attack, add the following to your lighttpd.conf file.

ssl.use-sslv2 = "disable" ssl.use-sslv3 = "disable"

You need to be running at least Lighttpd 1.4.29

By Томасина (Own work) CC-BY-SA-3.0, via Wikimedia Commons
By Томасина (Own work) [CC-BY-SA-3.0](http://creativecommons.org/licenses/by-sa/3.0), via Wikimedia Commons
To respond on your own website, write a post which contains a link to this post - then enter the URl of your page here. Learn more about WebMentions.

#how-to