On Sun, 8 Oct 2006, Peter Lees wrote:
>ok - my last post in this discussion with myself :P
>
>looks like my woes relate to the non-inclusion of the aptly-named SUNWcry
>packages to provide "HIGH" encryption.
>
>changing my apache2 SSLCipherSuite from:
> SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM
>to
> SSLCipherSuite MEDIUM:!aNULL:+SHA1:+MD5:+MEDIUM
>
>gave me a working SSL server
yes, that's it, that's what is Apache shipped with Solaris already
preconfigured for. This limitation of not shipping some level of encryption
should go away soon, I hope. Note that's not about export control, it was
about import control.
>so - before i go install openssl 0.9.8d over the top of my
>snv_49-prepackaged version, can anyone suggest a simple way of getting
>SUNWcry* -equivalent into my snv_49 SXCR installation? (bfu isn't really
>what i want...)
hmm, not sure myself. You can download SUNWcry* from sun.com for S10
but that doesn't give you anything since it's 0.9.7d for S10.
if you have archives, the only thing you need is to get two filtee
libraries: /usr/sfw/lib/libcrypto_extra.so.0.9.8 and
/usr/sfw/lib/libssl_extra.so.0.9.8.
hope this helps, Jan.
--
Jan Pechanec
