Ben Hyde wrote:
 > 
 > Sorry for the hit and run Question, it's hard to search
 > for questions like this one:
 > 
 > When I setup the usual MSIE FAQ recomendation...
 > 
 >  SetEnvIf User-Agent ".*MSIE.*" \
 >      nokeepalive ssl-unclean-shutdown \
 >      downgrade-1.0 force-response-1.0
 >  
 >  SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
 > 
 > in each of my vhosts running "Apache/1.3.12 (Unix) mod_ssl/2.6.2 
 > OpenSSL/0.9.4 ApacheJServ/1.1.2"  I get "no shared cipher", other
 > than the DSA certificate thang is there something obvious I
 > should have figured out myself?
 > 
 >  - ben

The following presumably explains that problem.

  OpenSSL> version
  OpenSSL 0.9.4 09 Aug 1999
  OpenSSL> ciphers -v 'ALL:-SSLv3'
  RC4-64-MD5              SSLv2 Kx=RSA      Au=RSA  Enc=RC4(64)   Mac=MD5 
  DES-CBC3-MD5            SSLv2 Kx=RSA      Au=RSA  Enc=3DES(168) Mac=MD5 
  DES-CBC-MD5             SSLv2 Kx=RSA      Au=RSA  Enc=DES(56)   Mac=MD5 
  IDEA-CBC-MD5            SSLv2 Kx=RSA      Au=RSA  Enc=IDEA(128) Mac=MD5 
  RC2-CBC-MD5             SSLv2 Kx=RSA      Au=RSA  Enc=RC2(128)  Mac=MD5 
  EXP-RC2-CBC-MD5         SSLv2 Kx=RSA(512) Au=RSA  Enc=RC2(40)   Mac=MD5  export
  RC4-MD5                 SSLv2 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=MD5 
  EXP-RC4-MD5             SSLv2 Kx=RSA(512) Au=RSA  Enc=RC4(40)   Mac=MD5  export
  OpenSSL> ciphers -v 'ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP'
  RC4-64-MD5              SSLv2 Kx=RSA      Au=RSA  Enc=RC4(64)   Mac=MD5 
  OpenSSL> exit

 - ben
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to