Re: [twsocket] Disabling SSLv2 for PCI compliance

2010-01-30 Thread Fastream Technologies
I am not sure. I just need the ability to force the SSL client to avoid using SSLV2. Regards, SZ On Fri, Jan 29, 2010 at 8:55 PM, Arno Garrels arno.garr...@gmx.de wrote: Fastream Technologies wrote: Hello, In version ICS-SSLv6, this was working well with the same app code but in

Re: [twsocket] Disabling SSLv2 for PCI compliance

2010-01-30 Thread Arno Garrels
Fastream Technologies wrote: I found this issue and posted it to the OpenSSL mailing list in Oct. 2009, with no reply, it's probably the same issue: My client uses sslv23_method() with SSL_OP_NO_SSLv2 in SSL_CTX_set_options. Since I upgraded to v0.98k the handshake with one particular server

Re: [twsocket] Disabling SSLv2 for PCI compliance

2010-01-30 Thread Fastream Technologies
Anyway, any workaround for this? On Sat, Jan 30, 2010 at 11:16 AM, Arno Garrels arno.garr...@gmx.de wrote: Fastream Technologies wrote: I found this issue and posted it to the OpenSSL mailing list in Oct. 2009, with no reply, it's probably the same issue: My client uses sslv23_method()

Re: [twsocket] Disabling SSLv2 for PCI compliance

2010-01-30 Thread Arno Garrels
Fastream Technologies wrote: Anyway, any workaround for this? No. I simply moved back to v0.98i. You could try latest ICS v7 with v0.98k and the HTTPS demo and see whether that fixes the issue. In latest ICS v7 support for Tickets was disabled, that _might_ have fixed it. -- Arno Garrels

[twsocket] Disabling SSLv2 for PCI compliance

2010-01-29 Thread Fastream Technologies
Hello, In version ICS-SSLv6, this was working well with the same app code but in latest ICSv7, customers are unable to disable SSLv2 for PCI compliance (a security standard from VISA). Does anybody have any tested code for this? Regards, SZ -- To unsubscribe or change your settings for TWSocket

Re: [twsocket] Disabling SSLv2 for PCI compliance

2010-01-29 Thread Arno Garrels
Fastream Technologies wrote: Hello, In version ICS-SSLv6, this was working well with the same app code but in latest ICSv7, customers are unable to disable SSLv2 for PCI compliance (a security standard from VISA). Does anybody have any tested code for this? I found this issue and posted it