Why does the server offers sslv3 when I Only enable SSLv3 :-s
SSL_PROTOCOL SSLv3
From: Eric Covener
To: users@httpd.apache.org
Cc: Christopher Schultz
Date: 10/02/2017 13:48
Subject:Re: [users@httpd] apache 2.4.10 sslv3 not offering when tls is
enabled
On Fri, Feb 10, 2017 at 3:29 AM, Sven Crul wrote:
> I cannot get the server to offer SSLV3 when TLS is enabled (Any TLS )
> when I do ssl protocol SSLv3 then sslv3 works but from the moment I add TLS
> , SSLv3 no longer works
>
Debian compiles openssl w/o SSLv3 support. You'll need to build a
7-02-10 9:29 GMT+01:00 Sven Crul
To: ""
Date: 10/02/2017 10:00
Subject: Re: [users@httpd] apache 2.4.10 sslv3 not offering when tls is
enabled
do you change SSLCipherSuite?, show us which one you have
2017-02-10 9:29 GMT+01:00 Sven Crul :
Hi,
First off all Thanks ,
k with >
https://mozilla.github.io/server-side-tls/ssl-config-generator/
From: Christopher Schultz
Reply: users@httpd.apache.org
Date: 10 February 2017 at 12:15:30 AM
To: users@httpd.apache.org
Subject: Re: [users@httpd] apache 2.4.10 sslv3 not offering wh
t; ]Mitchell Krog Photography ---10/02/2017
> 08:26:09---Your SSL config for Apache 2.4.10 should be as follows
>
>
> From: Mitchell Krog Photography
> To: Christopher Schultz ,
> users@httpd.apache.org
> Date: 10/02/2017 08:26
> Subject: Re: [users@httpd] apache 2.4.10 sslv3
longer works
Sven
From: Mitchell Krog Photography
To: Christopher Schultz ,
users@httpd.apache.org
Date: 10/02/2017 08:26
Subject:Re: [users@httpd] apache 2.4.10 sslv3 not offering when tls is
enabled
Your SSL config for Apache 2.4.10 should be as
apache 2.4.10 sslv3 not offering when tls is
enabled
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Daniel,
On 2/9/17 4:53 PM, Daniel wrote:
> Try manually:
>
> SSLProtocol SSLv3 TLSv1 TLSv1.1 TLSv1.2
And, please, for the love of god, add these, too:
SSLHonorServerOrder On
SSLCipherSuite
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
Daniel,
On 2/9/17 4:53 PM, Daniel wrote:
> Try manually:
>
> SSLProtocol SSLv3 TLSv1 TLSv1.1 TLSv1.2
And, please, for the love of god, add these, too:
SSLHonorServerOrder On
SSLCipherSuite TLSv1.2:TLSv1.1:TLSv1:SSLv3
This will cause "better" cip
Try manually:
SSLProtocol SSLv3 TLSv1 TLSv1.1 TLSv1.2
2017-02-09 17:30 GMT+01:00 Sven Crul :
> Hi,
>
>
> I switch to debian with apache 2.4.10 where I need sslv3 for backwards
> compatibility with some OLD clients
>
> I use openssl 1.0.1t (latest stable for debian)
>
>
> with the settings "sslp
