Re: Disabling SSLv3

Hi all,

I have to disable it in /etc/sysconfig/perdition :
POP3S_FLAGS=3D"--outgoing_port 110 --ssl_mode tls_listen,tls_listen_force"
IMAP4S_FLAGS=3D"--outgoing_port 143 --ssl_mode tls_listen,tls_listen_force"

Hope it will help you.

Regards

Mael

-----Message d'origine-----
De=A0: [email protected] [mailto:perdition-users-bounces=
@vergenet.net] De la part de Xavier Garcia
Envoy=E9=A0: vendredi 31 octobre 2014 13:59
=C0=A0: [email protected]
Objet=A0: [PERDITION-USERS] Disabling SSLv3

Dear all,

I am trying to disable SSLv3  on perdition 2.0-1.x86_64 It is running in a =
RHEL 6.5 clone and it was compiled with the SPEC files.

In theory, I should apply the following configuration but it also disables =
TLSv1 and TLSv1.1, being TLSv1.2 still available.

---
ssl_listen_ciphers "ALL:!SSLv2:!SSLv3"
---

I don't know much about cryptography but I guess it makes sense because I o=
btain the same result in all my boxes (RHEL 6.5 , Fedora and FreeBSD 10) wh=
en I execute:

openssl ciphers -v 'ALL:!SSLv2:!SSLv3'


What would be the best way to disable SSLv2 and SSLv3 for incoming and outg=
oing connections?

Regards,

Xavier Garcia
______________________________________________
Perdition-users mailing list
[email protected]
http://lists.vergenet.net/listinfo/perdition-users

----
______________________________________________
Perdition-users mailing list
[email protected]
http://lists.vergenet.net/listinfo/perdition-users