Re: [twsocket] Disabling SSLv2 for PCI compliance

2010-01-30 Thread Arno Garrels
Fastream Technologies wrote: > Anyway, any workaround for this? No. I simply moved back to v0.98i. You could try latest ICS v7 with v0.98k and the HTTPS demo and see whether that fixes the issue. In latest ICS v7 support for "Tickets" was disabled, that _might_ have fixed it. -- Arno Garrels

Re: [twsocket] Disabling SSLv2 for PCI compliance

2010-01-30 Thread Fastream Technologies
Anyway, any workaround for this? On Sat, Jan 30, 2010 at 11:16 AM, Arno Garrels wrote: > Fastream Technologies wrote: > > >> I found this issue and posted it to the OpenSSL mailing list in Oct. > >> 2009, with no reply, it's probably the same issue: > >> "My client uses sslv23_method() with SSL_

Re: [twsocket] Disabling SSLv2 for PCI compliance

2010-01-30 Thread Arno Garrels
Fastream Technologies wrote: >> I found this issue and posted it to the OpenSSL mailing list in Oct. >> 2009, with no reply, it's probably the same issue: >> "My client uses sslv23_method() with SSL_OP_NO_SSLv2 in >> SSL_CTX_set_options. >> Since I upgraded to v0.98k the handshake with one particu

Re: [twsocket] Disabling SSLv2 for PCI compliance

2010-01-30 Thread Fastream Technologies
I am not sure. I just need the ability to force the SSL client to avoid using SSLV2. Regards, SZ On Fri, Jan 29, 2010 at 8:55 PM, Arno Garrels wrote: > Fastream Technologies wrote: > > Hello, > > > > In version ICS-SSLv6, this was working well with the same app code > > but in latest ICSv7, cu

Re: [twsocket] Disabling SSLv2 for PCI compliance

2010-01-29 Thread Arno Garrels
Fastream Technologies wrote: > Hello, > > In version ICS-SSLv6, this was working well with the same app code > but in latest ICSv7, customers are unable to disable SSLv2 for PCI > compliance (a security standard from VISA). Does anybody have any > tested code for this? I found this issue and post

[twsocket] Disabling SSLv2 for PCI compliance

2010-01-29 Thread Fastream Technologies
Hello, In version ICS-SSLv6, this was working well with the same app code but in latest ICSv7, customers are unable to disable SSLv2 for PCI compliance (a security standard from VISA). Does anybody have any tested code for this? Regards, SZ -- To unsubscribe or change your settings for TWSocket