AW: Enable SSL Forward Secrecy

2017-08-30 Thread Julian Zielke
t-level-integration.com>> À: "Cyril Bonté" <cyril.bo...@free.fr<mailto:cyril.bo...@free.fr>> Cc: haproxy@formilux.org<mailto:haproxy@formilux.org> Envoyé: Mercredi 30 Août 2017 15:11:47 Objet: AW: Enable SSL Forward Secrecy Hi Cyril, tired it without success. Maybe H

Re: AW: Enable SSL Forward Secrecy

2017-08-30 Thread Cyril Bonté
> De: "Julian Zielke" <jzie...@next-level-integration.com> > À: "Cyril Bonté" <cyril.bo...@free.fr> > Cc: haproxy@formilux.org > Envoyé: Mercredi 30 Août 2017 15:11:47 > Objet: AW: Enable SSL Forward Secrecy > > Hi Cyril, > > tired it

AW: Enable SSL Forward Secrecy

2017-08-30 Thread Julian Zielke
Hi Cyril, tired it without success. Maybe HaProxy isn't just capable of doing this. Julian -Ursprüngliche Nachricht- Von: Cyril Bonté [mailto:cyril.bo...@free.fr] Gesendet: Mittwoch, 30. August 2017 14:49 An: Julian Zielke Cc: haproxy@formilux.org

AW: Enable SSL Forward Secrecy

2017-08-30 Thread Julian Zielke
device.com<mailto:daniel.schnel...@centerdevice.com>> Cc: Georg Faerber <ge...@riseup.net<mailto:ge...@riseup.net>>; haproxy+h...@formilux.org<mailto:haproxy+h...@formilux.org> <haproxy@formilux.org<mailto:haproxy@formilux.org>> Betreff: AW: Enable SSL Forwar

AW: Enable SSL Forward Secrecy

2017-08-30 Thread Julian Zielke
-EDE-CBC-SHA Von: Julian Zielke [mailto:jzie...@next-level-integration.com] Gesendet: Mittwoch, 30. August 2017 12:23 An: Daniel Schneller <daniel.schnel...@centerdevice.com> Cc: Georg Faerber <ge...@riseup.net>; haproxy+h...@formilux.org <haproxy@formilux.org> Betreff: AW:

AW: Enable SSL Forward Secrecy

2017-08-30 Thread Julian Zielke
Output is: SRP-DSS-AES-256-CBC-SHA SRP-RSA-AES-256-CBC-SHA SRP-AES-256-CBC-SHA ECDH-RSA-AES256-SHA ECDH-ECDSA-AES256-SHA AES256-SHA PSK-AES256-CBC-SHA SRP-DSS-AES-128-CBC-SHA SRP-RSA-AES-128-CBC-SHA SRP-AES-128-CBC-SHA ECDH-RSA-AES128-SHA ECDH-ECDSA-AES128-SHA AES128-SHA PSK-AES128-CBC-SHA *

AW: Enable SSL Forward Secrecy

2017-08-30 Thread Julian Zielke
The output is: Built with OpenSSL version : OpenSSL 1.0.2g 1 Mar 2016 Running on OpenSSL version : OpenSSL 1.0.2g 1 Mar 2016 OpenSSL library supports TLS extensions : yes OpenSSL library supports SNI : yes OpenSSL library supports prefer-server-ciphers : yes Haproxy Version is 1.7.9. *

AW: Enable SSL Forward Secrecy

2017-08-30 Thread Julian Zielke
Hi Georg, tried this already without effect. - Julian -Ursprüngliche Nachricht- Von: Georg Faerber [mailto:ge...@riseup.net] Gesendet: Mittwoch, 30. August 2017 11:51 An: haproxy@formilux.org Betreff: Re: Enable SSL Forward Secrecy On 17-08-30 09:33:23, Julian Zielke wrote: > Hi, > >

AW: Enable SSL Forward Secrecy

2017-08-30 Thread Julian Zielke
Hi, sure I can share it since the site since it’s secured already in many ways: https://www.ssllabs.com/ssltest/analyze.html?d=portal-vonovia.next-level-apps.com=on * Julian Von: Daniel Schneller [mailto:daniel.schnel...@centerdevice.com] Gesendet: Mittwoch, 30. August 2017 11:39 An: