Re: Disable SSLv2 ?

2008-10-28 Thread Ken Murchison
Wesley Alan Wright wrote: Using cyrus-imapd-2.2.12-9.RHEL4.i386 and cyrus-sasl-2.1.19-14.i386, trying to disable sslV2 to satisfy silly PCI (Purchase Card Industry) requirements yet keep ports 993 and 995 open. Tried 37 different variations of tls_cipher_list includin draconian

Disable SSLv2 ?

2008-10-27 Thread Wesley Alan Wright
Using cyrus-imapd-2.2.12-9.RHEL4.i386 and cyrus-sasl-2.1.19-14.i386, trying to disable sslV2 to satisfy silly PCI (Purchase Card Industry) requirements yet keep ports 993 and 995 open. Tried 37 different variations of tls_cipher_list includin draconian tls_cipher_list: -ALL: +HIGH:-SSLv2m