On 27.07.09 09:02, Capstone wrote: > Specifically, will SSLCipherSuite directive take precedence over the > SSLProtocol directive? no. > If I have omitted the SSLProtocol directive entirely. But I have > something like this in my SSLCipherSuite directive, > > SSLCipherSuite TLSv1:SSLv3:+HIGH:+MEDIUM:!LOW:!NULL > > Does this not allow any SSLv2 traffic to my server? it only disbles low ciphers. I think I also disable EXPORT ciphers... -- Matus UHLAR - fantomas, uhlar@xxxxxxxxxxx ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. A day without sunshine is like, night. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx