TLS 1.0 Backing Down to SSL 3.0

"Fought, Richard" <[email protected]>
Newsgroups gmane.comp.apache.mod-ssl.user
Message-ID <[email protected]> 
Hello,

I'm trying to configure my Apache 2.0.59 server w/ mod_ssl to use TLS
1.0 only.  I have set the SSLCipherSuite accordingly, however when I
connect with IE6 with SSLv3 enabled and TLSv1 disabled, I still get
through because of the TLS ability to back down to SSL 3.0.  Is there a
way to disable this behavior in the configuration?

Thanks,
Rich
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [email protected]
Automated List Manager                            [email protected]
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.