[web2py] Re: SSL POODLE vulnerable

2015-06-21 Thread Mark
Thanks Dave! I have problems to upgrade, also I am not sure if upgrade to the newest web2py can solve this problem. I will try Apache or nginx if there is no way to switch to TLS in Rocket. On Friday, June 19, 2015 at 6:52:04 PM UTC-4, Dave S wrote: > > > > On Friday, June 19, 2015 at 3:38:08

[web2py] Re: SSL POODLE vulnerable

2015-06-19 Thread Dave S
On Friday, June 19, 2015 at 3:38:08 PM UTC-7, Dave S wrote: > > > > On Friday, June 19, 2015 at 3:34:15 PM UTC-7, Dave S wrote: >> >> >> Almost certainly the correct choice is to upgrade. 2.4.5 is about 2 >> years old, innit? >> > > That said, I don't see anything about TLS or Rocket in the

[web2py] Re: SSL POODLE vulnerable

2015-06-19 Thread Dave S
On Friday, June 19, 2015 at 3:34:15 PM UTC-7, Dave S wrote: > > > Almost certainly the correct choice is to upgrade. 2.4.5 is about 2 years > old, innit? > That said, I don't see anything about TLS or Rocket in the summary changelogs (see threads like "2.11.2 is out"; in the GG search box

[web2py] Re: SSL POODLE vulnerable

2015-06-19 Thread Dave S
On Friday, June 19, 2015 at 9:40:31 AM UTC-7, Mark wrote: > > Hello, > > I use Web2py 2.4.5 with built-in Rocket on windows 2008 server, and was > told that it is SSL POODLE vulnerable and must switch into TLS instead. > > Is it possible to switch SSL into TLS in Rocket? Or, how to handle th