Re: [Resin-interest] BEAST SSL Attack

2012-12-05 Thread Aaron Freeman
Very good, I appreciate the feedback. Thanks, Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] On Behalf Of Paul Cowan Sent: Wednesday, December 05, 2012 9:02 AM To: General Discussion for the Resin application server Subject: Re: [Resin-in

Re: [Resin-interest] BEAST SSL Attack

2012-12-05 Thread Paul Cowan
Hi Folks, Resin does not support "SSLHonorCipherOrder" yet. We already received a request from another customer and there is a feature request for this here: http://bugs.caucho.com/view.php?id=5282 This is an OpenSSL feature, not JSSE. We'll be implementing it in an upcoming release. Probab

Re: [Resin-interest] BEAST SSL Attack

2012-12-05 Thread Aaron Freeman
Knut, Thanks a bunch for your reply. I saw you referencing another email you sent, but this is the only one I saw come through the group. At any rate, we are already using the cipher-suites feature, but in this case that’s not enough. They are telling us that we actually have to be ab