Re: [Resin-interest] BEAST SSL Attack

2012-12-05 Thread Aaron Freeman
Knut, Thanks a bunch for your reply. I saw you referencing another email you sent, but this is the only one I saw come through the group. At any rate, we are already using the cipher-suites feature, but in this case that’s not enough. They are telling us that we actually have to be

Re: [Resin-interest] BEAST SSL Attack

2012-12-05 Thread Paul Cowan
Hi Folks, Resin does not support SSLHonorCipherOrder yet. We already received a request from another customer and there is a feature request for this here: http://bugs.caucho.com/view.php?id=5282 This is an OpenSSL feature, not JSSE. We'll be implementing it in an upcoming release.