openstreetmap/chef — pull request #7 by hannob (2014-12-19 03:13:15+00:00)
Title: Disable deprecated SSLv3 (POODLE fix)

The SSLv3 protocol is considered deprecated and dangerous due to known security vulnerabillities (POODLE). Major webpages (e.g. twitter) and browsers (firefox, chromium will follow) have recently disabled SSLv3. OSM should do, too (apache template config already does).

This issus is currently a reason why osm tile servers get a bad rating on the Qualys SSL Labs test. The other major issue is a certificate signed with sha-1, which should be replaced as soon as possible.