/ Zope / Apsis / Pound Mailing List / Archive / 2010 / 2010-09 / SSL Weak Cipher Suites Supported

[ << ] [ >> ]

[ Ssl Version 2 (v2) Protocol Detection / alexus ... ] [ poundctl / =?ISO-2022-JP?B?GyRCMHAzQCEhRD47VhsoQg=... ]

SSL Weak Cipher Suites Supported
alexus <alexus(at)gmail.com>		 2010-09-02 22:52:38 [ FULL ] 
how do I: Disable weak SSL ciphers?

similar to Apache:
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
[...]
RE: [Pound Mailing List] SSL Weak Cipher Suites Supported
"Jacob Anderson" <jwa(at)beyond-ordinary.com>		 2010-09-03 00:04:52 [ FULL ] 
Hello,

You don't disable, you just authorize which ciphers you want to offer to the
client:

  Ciphers "TLSv1+SSLv3"
[...]
MailBoxer