mikesplain/cve-2014-3566-poodle-cookbookChef cookbook that detects and fails runs on servers vulnerable to CVE-2014-3566 (POODLE) by scanning specified SSL ports, serving as both a security audit tool and proof-of-concept.
This cookbook will error out your chef run if your server is vulnerable to CVE-2014-3566.
Although this cookbook can be used to watch for failed chef runs, it is also a proof of concept.
| Key | Type | Description | Default |
|---|---|---|---|
| ['CVE-2014-3566-poodle']['ports'] | Array | Ports to check for vulnerability | ['443','8443'] |
Include CVE-2014-3566-poodle in your node's run_list:
{
"run_list": [
"recipe[CVE-2014-3566-poodle::default]"
]
}
This cookbook includes a psuedo test suite. The first 2 suites should pass as they test a blank instance and an instance with defaunt nginx. The third squite should fail on all platforms as port 443 ssl is opened in Nginx.
Author:: Mike Splain ([email protected])