Re: [Resin-interest] Resin 3.0.x and PCI Compliance

2009-12-29 Thread Knut Forkalsrud
Back in the 2.1 days you could choose which to enable with attributes on the HTTP tag: You could try, with a little luck it may still work with 3.0.x If you want to switch to OpenSSL you can extract your JSSE key/cert, although last time I

[Resin-interest] Resin 3.0.x and PCI Compliance

2009-12-29 Thread Aaron Freeman
I am a bit baffled. For PCI compliance we must restrict weak ciphers, but I see no mechanism to do that with JSSE, which we have been using for years. It appears we can do this with openssl on Resin 3.0.x Is that correct? Does that mean I need to purchase a new certificate or can we easily