Translated message

A translation of this page exists in English.

Warning message

This translation is outdated. For the most up-to-date information, please refer to the English version.

最欢乐、最环保……盘点世界各国“清明节”之最

????? -
百度 现在，鲁家村从原来负债150万到现在集体资产个亿，村民人均收入达到35600元。

Red Hat ?? ???? SSLv3 ?????? ???(?? 'POODLE' ? ??)? ?????, CVE-2014-3566 ?? ? ??? ???? ????. SSLv3 ? ?? ??? ? ??? ??? ????.


?? ??

POODLE ? Padding Oracle On Downgraded Legacy Encryption ? ?????. ?-??-?? ???? ? ???? ???? padding oracle side-channel ??? ???? ???? ?? ? ? ????. ??? ??? ???? OpenSSL ???? ?? ?????.

POODLE ? ??? ??? ??? ??, ?? Secure Socket Layer (SSL) ?? 3? ???? ??? ?????. Transport Layer Security (TLS)? ??? ??? ??? ????? ??? ?? ????.


??

?-??-?? ?? ????

? ???? ?? ??? ?? ? ? ????. ?-??-?? ??? ?? ??? ??? ?????. ??? ???? ?? ???, SSL? ??? ???? ?? TLS ? ???? ?? Red Hat? ?????.

Fallback ?? ????

?? ???? TLS TLS Fallback Signaling Cipher Suite Value(TLS_FALLBACK_SCSV) ? ???? ??? ?????? ??? ??? ?? ????. ? fallback ????? ?????? ??? ??? ??? ??? ??? SSL/TLS ??? ???? ?? ???? ???. ?????? ??? ??? ??? ?, ?????? ??? ???? ????? ??? ??? ???, ??? ??? ??? ????.

?? HTTPs ??????? out-of-band ???? fallback ? ?????.
????? ?? ???? ??? Red Hat ? ???? ???? ?? ??? ???? :

  • ??? ??
  • ????
  • Curl ???? ?????

??, ??? ????? ????? ??? ? ??? ??? Red Hat ? ?? ??? ?? ? ?? ???????.

fallback ??? ???? ???, ???? ?????(??? ?????) ??? TLS_FALLBACK_SCSV ??? ???? ??? ???????.

?? ?? ?? SCSV ??? ???? ??? ????, ??? ????? ??? ???? ??? ????. ??, ?? ??? ?????? ???? ?? ???, ????? ?? ????? ?? ??? ?? ? ??? ??, ??? ??? ???? ????.

? ?? ?? ????? ??? ?? ??? ?? ??? ????? ????. RHSA-2014:1652-1 ?? RHSA-2014:1653-1

HTTPs ? ?? ????? :
SSLv3 ? ?????? ???? ??? TLS ??? ?????. ???, SSL ? ???? ????? TLS ? ???? ?? ?? ??????? ??? SSL ?????? ???? ???? ? ??? plain-text ??? ???? ? ? ????. ????? SSL ? ???? ?? ??, ? ???? ???? ????? ????.

??? ????

Red Hat ?????? ???

Red Hat ?? ??? ?? ????? ??? ??? ?? ??? ? ?? ??? ???? ?? ?? ??? Red Hat Access Lab : SSLv3 (POODLE) Detector ?? ??????.

? ???

??? ??? ?? ?? ??? ? ??? ??? ????? (poodle.sh) ? SSLv3 ? ???????? ???? ??? ? ????.

??: ? ????? ??? ??? ??? ??? ? ?? ???, ??? ??? ??? ? ?? ??? ?????. ????? ?? ??? (443)? ?????.

????

?? ???? ????? ???? SSLv3? ???? ??? ?? ?????. ?? Red Hat? ?? ?? ??? SSLv3? ???? ??? ?? ? ????? ????.
?? SSL/TLS ??? ???? ?? 3rd-party ???? ???? ???, SSLv3 ? ???? ?? ???? ? ??? ?? ?? ?? ??? ????. ? ??, ???? ??? ? ?????.

?? ???? ???
Red Hat Enterprise Linux Tomcat, Firefox/Chromium, httpd, vsftpd, Dovecot/Postfix, other components
JBoss Enterprise Middleware Tomcat/JBoss Web, httpd, EJB (EAP 5), EJB (EAP 6), JMS (EAP 5), Camel, Jetty, Karaf, Fuse, A-MQ
Red Hat Satellite Satellite Configuration
Red Hat Certificate System Tomcat
Inktank Ceph Enterprise httpd
Red Hat Enterprise OpenShift OpenShift Configuration , RHC client tools
Red Hat Enterprise Linux OpenStack Platform httpd
Red Hat CloudForms httpd
Red Hat Directory Server Directory Server Configuration
Red Hat Enterprise Virtualization RHEV-M
Red Hat JBoss Enterprise Application Platform EJB 5, EJB 6, JMS 5
Red Hat Storage Console httpd
Red Hat Update Infrastructure pulp, httpd

? ?? ??

?? ??? ??? ??? ???, Red Hat Technical Support ? ????? ????.

Attachments

Comments