I guess I may be confused as to the relationship between these to directives in the Apache 2 httpd.conf file.

Specifically, will SSLCipherSuite directive take precedence over the SSLProtocol directive?

For Example;

If I have omitted the SSLProtocol directive entirely. But I have something like this in my SSLCipherSuite directive,

SSLCipherSuite TLSv1:SSLv3:+HIGH:+MEDIUM:!LOW:!NULL

Does this not allow any SSLv2 traffic to my server?

Any info or help is greatly appreciated.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org
  "   from the digest: users-digest-unsubscr...@httpd.apache.org
For additional commands, e-mail: users-h...@httpd.apache.org

Reply via email to