Re: force mod_ssl to choose 3DES over RC4 ciphers?

2004-02-12 Thread Lutz Jaenicke
On Thu, Feb 12, 2004 at 02:30:06PM -, Daniel Eggleston wrote: > Hello all, > > I would like our secure server to default to 3DES 168-bit high > encryption for SSL sessions, but with the ability to fall back to 128- > bit RC4 _only_ if the client doesn't support 3DES. My current cipher- > spec

force mod_ssl to choose 3DES over RC4 ciphers?

2004-02-12 Thread Daniel Eggleston
Hello all, I would like our secure server to default to 3DES 168-bit high encryption for SSL sessions, but with the ability to fall back to 128- bit RC4 _only_ if the client doesn't support 3DES. My current cipher- spec for the SSLCipherSuite directive is 'HIGH:MEDIUM' which, with my version of Op