Perfect. I was able to work out what seems to be a reasonable list, if anybody here needs it for PCI compliance. It's probably not perfect, so if anyone sees any issues with it, please let me know:
<cipher-suites>SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA,TLS_RSA_WITH_AES_128_CBC_SHA,SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA</cipher-suites> Aaron On 3/25/2010 3:59 PM, Emil Ong wrote: > Hi Aaron, > > Not at the moment, but it's certainly possible. I filed a feature bug > for it: > > http://bugs.caucho.com/view.php?id=3970 > > Thanks, > Emil > > On Thu, Mar 25, 2010 at 02:34:33PM -0500, Aaron Freeman wrote: > >> Is there any documentation for using the cipher-suites tag? Instead of >> explicitly listing ciphers we do want, is there a way to list >> cipher-suites you want to exclude? Google isn't helping me find such an >> animal, so I am guess that it's not possible? >> >> Thanks, >> >> Aaron >> > _______________________________________________ resin-interest mailing list resin-interest@caucho.com http://maillist.caucho.com/mailman/listinfo/resin-interest
