ESXi 6 / vCenter 6 - SSLv3

[mvrk]

Hi,

Is there a possibility (like in 5.5u3b) to reenable SSLv3 on port 443 for ESXi 6.0 and vCenter 6.0 ?

[mvrk · Accepted solution]

Just found the solution for ESXi 6.0 :

Authd - Port 902

esxcli system settings advanced set -o /UserVars/VMAuthdDisabledProtocols -s ""

Hostd - rhttpproxy - Port 443

esxcli system settings advanced set -o /UserVars/ESXiRhttpproxyDisabledProtocols -s ""

/etc/init.d/rhttpproxy restart

And for vCenter 6.0 :

/etc/vmware-rhttpproxy/config.xml

Edit the file to add or remove <sslOptions>16924672</sslOptions> to enable or disable SSLv3 respectively:

<vmacore>
...

<ssl>
...
<sslOptions>16924672</sslOptions>
</ssl>

...

</vmacore>

/etc/init.d/vmware-rhttpproxy restart

[wgentrycni]

odd question.. would restarting rhttpproxy cause any downtime?