Re: SSL related error

On Wed, Oct 01, 2003 at 08:50:43PM +1200, Nick Wright wrote:
> Hi - yes I do:
>
> SSLProtocol -all +SSLv2
> SSLCipherSuite SSLv2:+HIGH:+MEDIUM:+LOW:+EXP
>
> This was from the Apache2 SSL/TLS howto page.
> I have changed the lines to this (from the same page):
>
> SSLProtocol all
> SSLCipherSuite HIGH:MEDIUM
>
> ..problem solved - thanks!
>
> Would you like me to leave the server set up with the old flags for a while?

No, thanks, I can reproduce the bug here now I've worked out what was
different about your server. The recommended default config is to use
no SSLProtocol line and this cipher suite config:

    SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

for best compatiblity with web browsers.

Regards,

joe

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Wed Oct 1 11:10:11 2003