ssl_cipher option to force SSLv3

ersion Number 1.333
Finished Yes
Type feature

directadmin.conf option called:

ssl_cipher=

default value is internally 'null' (not used). If anything is set for that variable (has to eb added) then those values are passed to the ssl function:

SSL_set_cipher_list

so as to enforce which versions of ssl are allowed to connect. The main reason to use this feature is to pass low level security scans which don't like SSLv2.

A sample value for this option would be:

ssl_cipher=ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:-LOW:-SSLv2:-EXP

 
ssl/957.txt · Last modified: 2010/02/26 16:40 by muscardin
 
Except where otherwise noted, content on this wiki is licensed under the following license:CC Attribution-Noncommercial-Share Alike 3.0 Unported
Please visit Automatic Backlinks to start earning free backlinks Recent changes RSS feed Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki