/ Zope / Apsis / Pound Mailing List / Archive / 2008 / 2008-10 / Disabling SSLv2

[ << ] [ >> ]

[ pound 2.4.3 + Redirect Loop / "Cam ... ] [ Pound usage for multi-domain solution. / ... ]

Disabling SSLv2
Albert <pound(at)alacra.com>
2008-10-07 22:04:51 [ FULL ]
Is there a way to disable SSLv2 for HTTPS requests in pound?  Pound is 
using SSLv23_server_method() to create a new SSL_CTX object, but I don't 
see any other calls to disable SSLv2. 

In apache, I can specify the following options to allow SSLv3 and TSLv1 
only:

SSLProtocol -ALL +SSLv3 +TLSv1

If pound doesn't support something similar, can it be added?
Attachments:  
text.html text/html 620 Bytes

MailBoxer