From 990304fe5f907a65733759f434724afbfefbc642 Mon Sep 17 00:00:00 2001
From: Derrick Dymock <derrick@puppetlabs.com>
Date: Tue, 14 Oct 2014 17:03:33 -0700
Subject: [PATCH] Remove SSL3 by default.

---
 manifests/params.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/params.pp b/manifests/params.pp
index adf825e..b6b7c8c 100644
--- a/manifests/params.pp
+++ b/manifests/params.pp
@@ -15,7 +15,7 @@
   $server_names_hash_bucket_size = 32
 
   $ssl_ciphers   = 'HIGH:!aNULL:!MD5'
-  $ssl_protocols = 'TLSv1.2 TLSv1.1 TLSv1 SSLv3'
+  $ssl_protocols = 'TLSv1.2 TLSv1.1 TLSv1'
 
   case $::operatingsystem {
     'debian',