Re: [users@httpd] Using the most secure SSL cipher suites

2015-10-19 Thread Daniel
or you can follow the recommendations at https://cipherli.st. I would not recommend depending on an alias such as HIGH, which includes generally considered unsafe ciphers such as PSK or NULL and it will really depend on the openssl version you use so could result in a list with differences from on

Re: [users@httpd] Using the most secure SSL cipher suites

2015-10-19 Thread Rubén Toribio Aldeguer
I susgest to read this, may be you find it usesfull: https://wiki.mozilla.org/Security/Server_Side_TLS B.R. 2015-10-18 22:42 GMT+02:00 David Mehler : > Hello, > > I'm configuring a new apache 2.4 system which will have a webmail app > running on it. I'm wanting to use only the most current/secur

[users@httpd] Using the most secure SSL cipher suites

2015-10-18 Thread David Mehler
Hello, I'm configuring a new apache 2.4 system which will have a webmail app running on it. I'm wanting to use only the most current/secure ssl ciphers and ones that offer perfect forward secrecy. I'm using FreeBSD 10.1 and my openssl version is 1.0.1l. In the virtual host configuration that will