Hanno, On 4/17/14, 12:29 PM, Hanno Böck wrote: > On Thu, 17 Apr 2014 12:27:37 -0400 > Christopher Schultz <chris@xxxxxxxxxxxxxxxxxxxxxx> wrote: > >> I'm trying to enable (and prefer!) ECDHE ciphers for clients that can >> support them. I've done the obvious: > [...] >> I'm running httpd 2.2.23 > > That's your problem. Get rid of that old cruft. You'll need apache 2.4 > (for that and for many other improvements regarding ssl encryption). What is it about httpd 2.4 that enables a particular cipher? I figured that if OpenSSL supported it, httpd would as well. Is there something about ECDHE that requires more plumbing on the httpd side? Thanks, -chris
Attachment:
signature.asc
Description: OpenPGP digital signature
|