On 27.07.09 09:02, Capstone wrote: > Specifically, will SSLCipherSuite directive take precedence over the > SSLProtocol directive?
no. > If I have omitted the SSLProtocol directive entirely. But I have > something like this in my SSLCipherSuite directive, > > SSLCipherSuite TLSv1:SSLv3:+HIGH:+MEDIUM:!LOW:!NULL > > Does this not allow any SSLv2 traffic to my server? it only disbles low ciphers. I think I also disable EXPORT ciphers... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. A day without sunshine is like, night. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org " from the digest: users-digest-unsubscr...@httpd.apache.org For additional commands, e-mail: users-h...@httpd.apache.org