On Thu, Aug 25, 2016 at 10:26 PM, Yann Ylavic <ylavic....@gmail.com> wrote:
> Hi Jacob,
>
> On Thu, Aug 25, 2016 at 7:36 PM, Jacob Champion <champio...@gmail.com> wrote:
>>
>> If you're interested, the relevant commit is r1757280 in httpd.
>
> An exhaustive ciphers list looks not evolutive to me, and depends on
> the SSL library version.
>
> "Modern" ciphers could possibly be defined by
> 'kECDHE:!MEDIUM:!LOW:!aNULL:!eNULL:!SSLv3', and "Intermediate" ones
> with 'kECDHE:kRSA:!MEDIUM:!LOW:!aNULL:!eNULL:!SSLv3'.

Actually, intermediate looks more like:
kECDHE:kDHE:kRSA:+SHA:!MEDIUM:!LOW:!aNULL:!eNULL:!DSS:!RC4:!3DES

---------------------------------------------------------------------
To unsubscribe, e-mail: docs-unsubscr...@httpd.apache.org
For additional commands, e-mail: docs-h...@httpd.apache.org

Reply via email to