https://bz.apache.org/bugzilla/show_bug.cgi?id=58213

--- Comment #7 from Kaspar Brand <[email protected]> ---
(In reply to Dr Stephen Henson from comment #6)
> I'll have a look at the OpenSSL side.

I couldn't find any commits to -master so far... what's the current thinking
for addressing RT4009?

> The SSL_CONF support might be a
> workaround here: for example try not specifying the cipherstring in the
> normal directives and use SSLOpenSSLConfCMD "CipherString" "SUITEB128"

That's indeed a workaround - and makes we wonder if we should also add special
treatment for CipherString in ssl_engine_init.c:ssl_init_server_ctx(), in the
loop which handles the ssl_ctx_param array?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to