In your httpd.conf or ssl.conf, there probably is a directive called SSLCipherSuite. If you add "-SSLv2" to the end of your CipherSuite string, and restart Apache, you will have disabled SSLv2. You can check the exact ciphersuites corresponding to a particular string with the "openssl ciphers" command, e.g. openssl ciphers -v 'ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:-SSLv2' Have a look at the documentations for complete details. The documentation is very good. -ascs -----Original Message----- From: Emmanuel E [mailto:emmanuel.e@xxxxxxx] Sent: Wednesday, April 19, 2006 8:37 PM To: users@xxxxxxxxxxxxxxxx Subject: Re: [users@httpd] apache help check out http://httpd.apache.org/docs/2.0/mod/mod_ssl.html#sslciphersuite ----- Original Message ----- From: <GSiao@xxxxxxxxxx> To: <users@xxxxxxxxxxxxxxxx> Sent: Wednesday, April 19, 2006 11:43 PM Subject: [users@httpd] apache help > Hi Gurus > > I am a newbie to apache and would like to ask for your help > > I have apache 1.3.33 installed and would like to disable ssl2.0 and enable > ssl3.0... is it as simple as edittin the httpd.conf ??? also, how do i > test > if ssl3.0 is enabled or working ??? > > any help is much appreciated... > > > > (Embedded image moved to file: pic11258.jpg) > > > Gary Siao > > > UNIX Administrator > > > Enterprise and Storage Infrastructure > > > T : 416.673.3337 > > > E : gsiao@xxxxxxxxxx > > > > > > > -------------------------------------------------------------------------------- > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|