Re: [openssl-users] ciphers

2016-02-17 Thread Salz, Rich
If all you want is TLS 1.2, then this line is enough: > >> SSLProtocol -All +TLSv1.2 > >> SSLCompression off > >> SSLInsecureRenegotiation off -- openssl-users mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Re: [openssl-users] ciphers

2016-02-16 Thread Viktor Dukhovni
On Wed, Feb 17, 2016 at 07:43:32AM +0100, mlrx wrote: > >> # Apache 2.4 > >> SSLCipherSuite > >> HIGH:kEECDH:+ECDSA:ECDSA:kEECDH:kEDH:+SHA:STRENGTH: \ > >> > >> !aNULL:!eNULL:!LOW:!MEDIUM:!3DES:!MD5:!EXP:!RC4:!DSS: \ > >> !PSK:!SRP:!k

Re: [openssl-users] ciphers

2016-02-16 Thread Viktor Dukhovni
On Wed, Feb 17, 2016 at 07:43:32AM +0100, mlrx wrote: > > Present content relevant to > > your question in the body of the message, and try to ask one specific > > and clear question at a time. > > The question is : "do I need to do better to secure it?" I think this fails the specificity requir

Re: [openssl-users] ciphers

2016-02-16 Thread mlrx
Le 17/02/2016 07:09, Viktor Dukhovni a écrit : > On Wed, Feb 17, 2016 at 06:29:43AM +0100, mlrx wrote: > >> I have asked stupid questions or it isn't the right way to ask for >> advices ? What's happening ? > > I, for one, typically ignore posts that ask me to view detached > content via pastebin

Re: [openssl-users] ciphers

2016-02-16 Thread Viktor Dukhovni
On Wed, Feb 17, 2016 at 06:29:43AM +0100, mlrx wrote: > I have asked stupid questions or it isn't the right way to ask for > advices ? What's happening ? I, for one, typically ignore posts that ask me to view detached content via pastebin and the like. Present content relevant to your question i

Re: [openssl-users] ciphers

2016-02-16 Thread mlrx
Le 12/02/2016 19:15, mlrx a écrit : > Hello ! > > I have some questions that I don't find answers by myself, > even after read the cookbook and a lot of web pages. > To be honest, I'm not really sure it's a problem but I > need to verify. > > Ok. I am setting up web server to host a critical java

[openssl-users] ciphers

2016-02-12 Thread mlrx
Hello ! I have some questions that I don't find answers by myself, even after read the cookbook and a lot of web pages. To be honest, I'm not really sure it's a problem but I need to verify. Ok. I am setting up web server to host a critical java application. There is Apache in front of Tomcat and