Re: [Pound Mailing List] Disable ssl v3

Emilio Campos <[email protected]>
Newsgroups gmane.comp.web.pound.general
Message-ID <[email protected]>
*Try with tag ciphers:*


*Ciphers "ALL:!SSLv3"*

*Regards*



2014-10-16 6:43 GMT+02:00 Kaye Ng <kng-T8NstTYpzHxS2++osPawLwC/[email protected]>:

>  Hi,
>
> With the advent of the Poodle exploit, I'm just wondering is there anyway
> in pound to disable support for ssl v3.0, but keep support for tls 1.0, 1.1
> and 1.2
>
> In nginX I can do the following:
>
> ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
>
>
> This has the effect of only supporting TLS v1.0+ and no ssl support.
> Is there any equivalent for doing this pound?
>
> Cheers,
> Kaye.
>



-- 
Load balancer distribution - Open Source Project
http://www.zenloadbalancer.com
Distribution list (subscribe): zenloadbalancer-support-5NWGOfrQmneRv+LV9MX5uipxlwaOVQ5f@public.gmane.org
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.