Disabling SSLv3
Xavier Garcia <[email protected]> Fri, 31 Oct 2014 13:59:01 +0100
| Newsgroups | gmane.mail.perdition.user |
|---|---|
| Message-ID | <[email protected]> |
Dear all, I am trying to disable SSLv3 on perdition 2.0-1.x86_64 It is running in a RHEL 6.5 clone and it was compiled with the SPEC files. In theory, I should apply the following configuration but it also disables TLSv1 and TLSv1.1, being TLSv1.2 still available. --- ssl_listen_ciphers "ALL:!SSLv2:!SSLv3" --- I don't know much about cryptography but I guess it makes sense because I obtain the same result in all my boxes (RHEL 6.5 , Fedora and FreeBSD 10) when I execute: openssl ciphers -v 'ALL:!SSLv2:!SSLv3' What would be the best way to disable SSLv2 and SSLv3 for incoming and outgoing connections? Regards, Xavier Garcia ______________________________________________ Perdition-users mailing list [email protected] http://lists.vergenet.net/listinfo/perdition-users