lamp: disable old TLS versionsv1.23.2

Signed-off-by: nachoparker <nacho@ownyourbits.com>

1 files changed, 28 insertions, 0 deletions

diff --git a/updates/1.24.0.sh b/updates/1.24.0.sh
new file mode 100644
index 00000000..1c359527
--- /dev/null
+++ b/updates/1.24.0.sh
@@ -0,0 +1,28 @@
+#!/bin/bash
+
+set -e
+
+## BACKWARD FIXES ( for older images )
+
+source /usr/local/etc/library.sh # sets NCVER PHPVER RELEASE
+
+# all images
+
+# disable old TLS versions
+file=/etc/apache2/conf-available/http2.conf
+grep -q '^SSLProtocol all -SSLv2 -SSLv3' "${file}" && {
+  sed -i 's|^SSLProtocol .*|SSLProtocol -all +TLSv1.2|' "${file}"
+  bash -c "sleep 10 && service apache2 reload" &>/dev/null &
+}
+
+# docker images only
+[[ -f /.docker-image ]] && {
+  :
+}
+
+# for non docker images
+[[ ! -f /.docker-image ]] && {
+  :
+}
+
+exit 0