"Ralf S. Engelschall" <[EMAIL PROTECTED]> writes:
> How about his quick try:
>
> rse@en1:/u/rse
> :> openssl ciphers -v "-ALL:RSA:-HIGH:-MEDIUM:-MD5:RC4-MD5:-RC4-64-MD5"
> DES-CBC-SHA SSLv3 Kx=RSA Au=RSA Enc=DES(56) Mac=SHA1
> EXP-DES-CBC-SHA SSLv3 Kx=RSA(512) Au=RSA Enc=DES(40) Mac=SHA1
> export
> NULL-SHA SSLv3 Kx=RSA Au=RSA Enc=None Mac=SHA1
> RC4-MD5 SSLv3 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5
> RC4-MD5 SSLv2 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5
Thanks. Maybe if I wasn't such a moron I'd be able to understand this. I
had hoped that I'd be able to see a pattern in the answer, but I
don't.
We'd like to have our config tool build this directive, but nobody can seem
to figure this directive out. The config tool would have checkboxes like:
[ ] 40 DES w/ SHA
[ ] 56 DES w/ SHA
[ ] 3DES w/ SHA
[ ] 40 RC4 w/ MD5
[ ] 64 RC4 w/ MD5
[ ] 128 RC4 w/ MD5
[ ] 128 RC4 w/ SHA
[ ] NULL w/ SHA
[ ] NULL w/ MD5
and build the directive as necessary. But I can't figure out how to mix
various keylengths among the two ciphers. These are the only options we'd
have. With the limitation that the key exchanges are RSA, and this may be
either SSLv2 or SSLv3.
Should anyone have any hints, that would be greatly appreciated. I'll share
my findings when I have them. Does Stronghold allow this kind of
configurability? I could just download their demo and see what they write
out.
Thanks,
Tom
--
Tom Vaughan <tvaughan at aventail dot com>
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]
