First off, let me say that I'm a Windows admin trying to address a vulnerability in Linux, so please use small words.
I have a CentOS server that has been identified as being vulnerable to POODLE, so I found the POODLE wiki and verified that I am at a higher patch level than what is required. Now I need to find mitigation steps for the installed services.
I used "yum list installed" and checked through the list for software referenced in the wiki's mitigation steps. I found that I have:
- httpd.x86_64 2.2.15-39.el6.centos
- httpd-manual.noarch 2.2.15-39.el6.centos
- httpd-tools.x86_64 2.2.15-39.el6.centos
Super. So I clicked the link to view httpd mitigation. The resolutions steps say I should modify either ssl.conf or nss.conf, but I don't have either of those files.
Now I'm stuck. I do not know the URL to the site(s) hosted on this server.