Re: [users@httpd] Syntax to replace Diffie-Hellman with RSA encryption

2011-06-19 Thread sunhux G
After making changes to httpd.conf, can I just issue 1) "kill -HUP httpd_instance_pid" for the change to take effect or 2) "service httpd reload" or 3) "service httpd restart" Select one or more of the above correct options Thanks Sun -

Re: [users@httpd] Syntax to replace Diffie-Hellman with RSA encryption

2011-06-18 Thread sunhux G
Thanks. I'll verify on Mon using the tool Zeek suggested or openssl: openssl s_client -cipher '!DH:!ADH:RC4+RSA:HIGH:MEDIUM: !aNULL:+SHA1:+MD5:+HIGH:+MEDIUM' - The official User-To-User support forum of the Apache HTTP Ser

Re: [users@httpd] Syntax to replace Diffie-Hellman with RSA encryption

2011-06-16 Thread zeek
ALL means include all ciphers. You'd then omit with ! To replace DH w/RSA I think you could do !ADH:+RSA I recommend using the SSL utility at http://serversniff.net to confirm On Thu, Jun 16, 2011 at 11:02:30PM +0800, sunhux G wrote: > Hi > > Further to the post, what's the correct syntax to

[users@httpd] Syntax to replace Diffie-Hellman with RSA encryption

2011-06-16 Thread sunhux G
Hi Further to the post, what's the correct syntax to replace DH with RSA encryption? Choose which of the options below are correct: 1) SSLCipherSuite ALL:!ADH:RC4+RSA:HIGH:MEDIUM: !aNULL:+SHA1:+MD5:+HIGH:+MEDIUM 2) SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM: !aNULL:+SHA1:+MD5:+HIGH