Introduction

POODLE allows malicious attempts on a server's SSLv3 protocol via man in the middle attack.  Anything web based that uses this protocol can be compromised.

POODLE Fix For Apache And Nginx For Some Linux Flavors

Ex: Ubuntu, add a global setting to /etc/nginx/nginx.conf in the http block, or to each block in /etc/nginx/sites-enabled.

Do the following:

Set the ssl_protocols directive to:

Restart the server:

SSLProtocol directive in the mod_ssl module.

Ubuntu:

if SSL is enabled, modify this file:

Edit or create the SSLProtocol directive and exclude SSLv3

Save and close the file. Restart the service to enable your changes.

Restart the server:

Ubuntu: sudo service apache2 restart

CentOS: sudo service httpd restart