If you are afraid of POODLE Attack, you should disable SSL v3. You can use this ansible playbook:
—
– hosts: test
remote_user: root
tasks:
– lineinfile: dest=/usr/local/apache/conf/includes/pre_main_global.conf line=”#Turn off SSL v3 support\nSSLProtocol All -SSLv2 -SSLv3\nSSLHonorCipherOrder On\n” insertafter=BOF
– name: rebuild httpd confs
command: /scripts/rebuildhttpdconf
notify:
– restart httpd
– name: ensure apache is running
service: name=httpd state=started
handlers:
– name: restart httpd
service: name=httpd state=restarted