Re: [us...@httpd] SSL vulnerability question

2010-10-20 Thread Matus UHLAR - fantomas
- Denise Edwards denise.edwa...@bowne.com wrote: Received security can results which had two issues: 1-SSL Server Supports Weak Encryption Vulnerability 2-SSL Server Has SSLv2 Enabled Vulnerability [...] - SSLCipherSuite property includes high, medium, low and SSLv2 On 18.10.10

RE: [us...@httpd] SSL vulnerability question

2010-10-20 Thread Edwards, Denise
Thanks. -Original Message- From: Matus UHLAR - fantomas [mailto:uh...@fantomas.sk] Sent: Wednesday, October 20, 2010 3:54 AM To: users@httpd.apache.org Subject: Re: [us...@httpd] SSL vulnerability question - Denise Edwards denise.edwa...@bowne.com wrote: Received security can

[us...@httpd] SSL vulnerability question

2010-10-18 Thread Edwards, Denise
Hi, Received security can results which had two issues: 1-SSL Server Supports Weak Encryption Vulnerability 2-SSL Server Has SSLv2 Enabled Vulnerability Two questions: - Has anyone had to address these issues for their installation of Apache httpd - If so what did you

Re: [us...@httpd] SSL vulnerability question

2010-10-18 Thread Igor Galić
- Denise Edwards denise.edwa...@bowne.com wrote: Hi, Received security can results which had two issues: 1-SSL Server Supports Weak Encryption Vulnerability 2-SSL Server Has SSLv2 Enabled Vulnerability Two questions: - Has anyone had to address these issues for their

RE: [us...@httpd] SSL vulnerability question

2010-10-18 Thread Edwards, Denise
[mailto:i.ga...@brainsware.org] Sent: Monday, October 18, 2010 1:25 PM To: users@httpd.apache.org Subject: Re: [us...@httpd] SSL vulnerability question - Denise Edwards denise.edwa...@bowne.com wrote: Hi, Received security can results which had two issues: 1-SSL Server Supports Weak

Re: [us...@httpd] SSL vulnerability question

2010-10-18 Thread Igor Galić
- Denise Edwards denise.edwa...@bowne.com wrote: Thanks Igor. 1 - Will eventually upgrade to latest, but wanted solution for 2.2.10 to fix in few days. 2- I don't see SSLProtocol property in config file for 2.2.10 Just because you don't see it there, does not mean it doesn't exist.

RE: [us...@httpd] SSL vulnerability question

2010-10-18 Thread Edwards, Denise
Thanks. Got it. -Original Message- From: Igor Galić [mailto:i.ga...@brainsware.org] Sent: Monday, October 18, 2010 1:52 PM To: users@httpd.apache.org Subject: Re: [us...@httpd] SSL vulnerability question - Denise Edwards denise.edwa...@bowne.com wrote: Thanks Igor. 1