RE: [us...@httpd] SSL vulnerability question

2010-10-20 Thread Edwards, Denise
Thanks. -Original Message- From: Matus UHLAR - fantomas [mailto:uh...@fantomas.sk] Sent: Wednesday, October 20, 2010 3:54 AM To: users@httpd.apache.org Subject: Re: [us...@httpd] SSL vulnerability question > - "Denise Edwards" wrote: > > Received security can re

Re: [us...@httpd] SSL vulnerability question

2010-10-20 Thread Matus UHLAR - fantomas
> - "Denise Edwards" wrote: > > Received security can results which had two issues: > > > > 1-SSL Server Supports Weak Encryption Vulnerability > > > > 2-SSL Server Has SSLv2 Enabled Vulnerability [...] > > - SSLCipherSuite property includes high, medium, low and SSLv2 On 18.10.10 17:25, Ig

RE: [us...@httpd] SSL vulnerability question

2010-10-18 Thread Edwards, Denise
Thanks. Got it. -Original Message- From: Igor Galić [mailto:i.ga...@brainsware.org] Sent: Monday, October 18, 2010 1:52 PM To: users@httpd.apache.org Subject: Re: [us...@httpd] SSL vulnerability question - "Denise Edwards" wrote: > Thanks Igor. > > 1 - Will ev

Re: [us...@httpd] SSL vulnerability question

2010-10-18 Thread Igor Galić
- "Denise Edwards" wrote: > Thanks Igor. > > 1 - Will eventually upgrade to latest, but wanted solution for 2.2.10 > to fix in few days. > 2- I don't see SSLProtocol property in config file for 2.2.10 Just because you don't see it there, does not mean it doesn't exist. Let me quote from t

RE: [us...@httpd] SSL vulnerability question

2010-10-18 Thread Edwards, Denise
Galić [mailto:i.ga...@brainsware.org] Sent: Monday, October 18, 2010 1:25 PM To: users@httpd.apache.org Subject: Re: [us...@httpd] SSL vulnerability question - "Denise Edwards" wrote: > Hi, > > > > Received security can results which had two issues: > > 1

Re: [us...@httpd] SSL vulnerability question

2010-10-18 Thread Igor Galić
- "Denise Edwards" wrote: > Hi, > > > > Received security can results which had two issues: > > 1-SSL Server Supports Weak Encryption Vulnerability > > 2-SSL Server Has SSLv2 Enabled Vulnerability > > > > Two questions: > > - Has anyone had to address these issues for their installa