Skip navigation
Register Now
* Username or password are incorrect

Downloads

Download Name:

Avaya Aura® Experience Portal - Disabling SSLv3

Download Type:

Software

Product Name:

Avaya Experience Portal , 7.0.x

Date Released:

Nov 7, 2014

Summary:

By default, Experience Portal servers can make secure connections to client programs and other servers using either Secure Socket Layer version 3 (SSLv3) or Transport Layer Security (TLS).  TLS is the successor to SSL and is considered more secure. 

CVE-2014-3566, which is commonly known as “POODLE”, is a serious security vulnerability related to the use of SSLv3.  All Experience Portal servers in your system should be configured to disable the use of SSLv3 in order to avoid this vulnerability.  This includes your Primary EPM server, all Auxiliary EPM servers, and all MPP servers. 

Note:  With SSLv3 disabled, Experience Portal servers will continue to make secure connections using TLS. 

The scripts on this page can be used to check whether your Experience Portal server has SSLv3 enabled and to disable SSLv3. 

checkSSLv3.sh

This script looks at the configuration of the Apache HTTP Server to see if any ports that are used by Experience Portal have SSLv3 enabled.  This script does not modify the system in any way.

Installation Instructions:

  1. Copy checkSSLv3.sh to the Experience Portal server to be checked
  2. Log into Linux on the Experience Portal server as a user with root privileges
  3. Navigate to the directory where checkSSLv3.sh was copied
  4. Execute the command below:
         bash checkSSLv3.sh

disableSSLv3.sh

This script modifies the Apache HTTP Server configuration to disable SSLv3 on all ports used by Experience Portal.

Installation Instructions:

  1. Copy disableSSLv3.sh to the Experience Portal server to be updated
  2. Log into Linux on the Experience Portal server as a user with root privileges
  3. Navigate to the directory where disableSSLv3 was copied
  4. Execute the command below:
         bash disableSSLv3.sh

Important:  disableSSLv3.sh restarts the service httpd.  This may cause a brief disruption of Experience Portal functionality running on that server.  However, no calls, email messages, or SMS messages should be lost.

File:

checkSSLv3.sh , 7.0.x

File name – checkSSLv3.sh

File size – 2.34 KB (2,397 bytes)
MD5 Sum – 1b65a2476f2193855e18376c92a0234e

File:

disableSSLv3.sh , 7.0.x

File name – disableSSLv3.sh

File size – 5.03 KB (5,160 bytes)
MD5 Sum – a5a3e2bd9dc0a9778ef4954e954575aa

You are now leaving Avaya Support and entering the Avaya Learning website.

Continue

This functionality is only available to customers and partners who are logged in. Please sign in now or Register using the Register Now! Link

Your SSO login does not have any Sold-To’s associated to it. To experience the features of Avaya's Support website, associate a Sold To to your SSO login, click here to learn how

OK

Your support registration has been received and is in the approval process. Your Company Administrator is reviewing your request in order to approve your login. You will receive a confirmation email upon approval. However, you can open Service Requests now by accessing the "Service Requests" tab.

OK

Tips for Searching Avaya Support


A good query consists of three things:

 Enclose exact words or phrases in double quotes. Include plus (+) to require words, minus (--) to exclude words, and OR between words. i.e. forwarding OR coverage + "all calls"-- remote

 

Don't include "special" characters in your search (i.e. &, <, >, *, $, / ,\, ....)

 

The more exact the phrases are to the actual title or string of text in a document, the better the results


Close

Welcome to the Avaya Support Website

Please visit the Terms of Use link to review how your support may change while using Web Chat, Web Talk and the Total Service Outage Button.

Explore your account information including assets, entitlements and contacts by visiting My Information> Explore Accounts

Videos and Tips on using the Avaya Support Website can be found here.

Use the Support by Product short-cut at the top of each page, and select your product and release to find the latest Product and Support Notices, the latest and top documentation, latest downloads, and the Top Solutions that agents are using to close customer tickets.

Login and leverage Ask Ava to get easy access to known solutions to your problems and to engage Avaya Live Agents through Web Chat.  We are set up for collaborating with you with screen sharing and Web Talk.

Close

Would you like to chat with one of our Support Agents?

Yes No Ask Me Later
Ava and Web Chat functionality is only available to customers and partners who are logged in and have an active maintenance agreement.
This functionality is not available for Avaya Associates.
Your access to this functionality is prohibited.
Session Expired .Please relogin!

This is a HIPAA compliant Account.

Please use https://avaya.service-now.com for support requests.

Report Provisioning DoA Parts is only available to Avaya SSO users who are logged in and have Sold To's associated to their login.

To validate your profile, use the https://support.avaya.com/support/STLookup.action link. If you do not have access to a Sold To, contact your Company Administrator

Logistics / Shipping Claims is only available to Avaya SSO users who are logged in and have Sold To's associated to their login.

To validate your profile, use the https://support.avaya.com/support/STLookup.action link. If you do not have access to a Sold To, contact your Company Administrator

Make a hardware warranty claim is only available to Avaya SSO users who are logged in and have Sold To's associated to their login.

To validate your profile, use the https://support.avaya.com/support/STLookup.action link. If you do not have access to a Sold To, contact your Company Administrator

Distributor PDOA Upload is only available to Avaya Business Partners and Employees who are logged in and have Sold To's associated to their login.

To validate your profile, use the https://support.avaya.com/support/STLookup.action link. If you do not have access to a Sold To, contact your Company Administrator

Distributor functionality is only available to Employees or to Avaya Distributors who are logged on and have Sold To's associated to their login.

To validate your profile, use the https://support.avaya.com/support/STLookup.action link. If you do not have access to a Sold To, contact your Company Administrator

The Sold To for the criteria provided must be associated to your SSO login. To validate this, use the https://support.avaya.com/support/STLookup.action link.

If you do not have access to this Sold To, contact your Company Administrator

EMEA LFS Hardware Return is only available to Avaya Business Partners which belong to EMEA region

The SO / PO entered is either not valid or not associated with the Sold To provided.

Serial Number can not be same