Hi

To get an A rating in SSLlabs SSL Server Test I had to remove SSLv3 
(poodle attack[2]) in nssl configuration example [3]

<< ns_param      protocols            "!SSLv2"
 >> ns_param      protocols            "!SSLv2:!SSLv3"

Regards,
Cesáreo

[1] https://www.ssllabs.com/ssltest/analyze.html
[2] 
https://community.qualys.com/blogs/securitylabs/2014/10/15/ssl-3-is-dead-killed-by-the-poodle-attack
[3] https://bitbucket.org/naviserver/nsssl

------------------------------------------------------------------------------
_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel

Reply via email to