Weblog entry #14 for bacula
#14
SSLv3 help
Posted by bacula on Tue 20 Feb 2007 at 17:01
Hi Guys, I want to use for my webserver to check sslprotocol version 3 i have edited my virtual host file and added the following lines in ssl section and restart the apache webserver SSLProtocol -all +SSLv3, SSLCipherSuite SSLv3:+HIGH:+MEDIUM This is enough or i need to install any updated openssl version currently i am running openssl_0.9.7e-3 Thnaks for your help
Comments on this Entry
Posted by Anonymous (213.164.xx.xx) on Wed 21 Feb 2007 at 12:28
What happens when you connect to the HTTPS server with your browser, and double-click the padlock? What does it say?
[ Parent | Reply to this comment ]
still it is showing version 1 how to change this to version3
[ Parent | Reply to this comment ]
Posted by Anonymous (62.30.xx.xx) on Wed 21 Feb 2007 at 22:57
What have you tried so far?
Always you are asking for help and never thanking people or informing us what you have tried and what doesnt work
Always you are asking for help and never thanking people or informing us what you have tried and what doesnt work
[ Parent | Reply to this comment ]
Try forcing all other ciphers out of the SSLCipherSuite, with a command like "SSLCipherSuite +HIGH:+MEDIUM:!ALL". This way Apache knows not to use any other algorithms than the ones included by HIGH and MEDIUM.
[ Parent | Reply to this comment ]