Re: [Resin-interest] BEAST SSL Attack

2013-02-12 Thread Aaron Freeman
[mailto:resin- mailto:interest-boun...@caucho.com interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Monday, January 14, 2013 2:01 PM To: 'General Discussion for the Resin application server' Subject: Re: [Resin-interest] BEAST SSL Attack Still needing a little assistance on this one. Thanks

Re: [Resin-interest] BEAST SSL Attack

2013-01-18 Thread Aaron Freeman
: [Resin-interest] BEAST SSL Attack Still needing a little assistance on this one. Thanks, Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Thursday, January 10, 2013 2:12 PM To: 'General Discussion for the Resin

Re: [Resin-interest] BEAST SSL Attack

2013-01-18 Thread Paul Cowan
, January 14, 2013 2:01 PM To: 'General Discussion for the Resin application server' Subject: Re: [Resin-interest] BEAST SSL Attack Still needing a little assistance on this one. Thanks, Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com

Re: [Resin-interest] BEAST SSL Attack

2013-01-18 Thread Aaron Freeman
- mailto:interest-boun...@caucho.com interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Monday, January 14, 2013 2:01 PM To: 'General Discussion for the Resin application server' Subject: Re: [Resin-interest] BEAST SSL Attack Still needing a little assistance on this one. Thanks, Aaron

Re: [Resin-interest] BEAST SSL Attack

2013-01-10 Thread Aaron Freeman
? Thanks, Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] On Behalf Of Scott Ferguson Sent: Tuesday, January 08, 2013 7:42 PM To: resin-interest@caucho.com Subject: Re: [Resin-interest] BEAST SSL Attack On 1/5/13 5:14 PM, Keith Fetterman

Re: [Resin-interest] BEAST SSL Attack

2013-01-08 Thread Scott Ferguson
*From:*resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] *On Behalf Of *Aaron Freeman *Sent:* Wednesday, December 05, 2012 10:51 AM *To:* 'General Discussion for the Resin application server' *Subject:* Re: [Resin-interest] BEAST SSL Attack Very good, I appreciate

Re: [Resin-interest] BEAST SSL Attack

2013-01-05 Thread Keith Fetterman
application server' *Subject:* Re: [Resin-interest] BEAST SSL Attack Very good, I appreciate the feedback. Thanks, Aaron *From:*resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] *On Behalf Of *Paul Cowan *Sent:* Wednesday, December 05, 2012 9:02 AM *To:* General

Re: [Resin-interest] BEAST SSL Attack

2013-01-02 Thread Scott Ferguson
Thanks, Aaron *From:*resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] *On Behalf Of *Aaron Freeman *Sent:* Wednesday, December 05, 2012 10:51 AM *To:* 'General Discussion for the Resin application server' *Subject:* Re: [Resin-interest] BEAST SSL Attack Very good, I

Re: [Resin-interest] BEAST SSL Attack

2013-01-02 Thread Aaron Freeman
Thanks, Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Wednesday, December 05, 2012 10:51 AM To: 'General Discussion for the Resin application server' Subject: Re: [Resin-interest] BEAST SSL Attack Very good

Re: [Resin-interest] BEAST SSL Attack

2012-12-05 Thread Aaron Freeman
...@caucho.com] On Behalf Of Knut Forkalsrud Sent: Tuesday, December 04, 2012 9:31 PM To: General Discussion for the Resin application server Subject: Re: [Resin-interest] BEAST SSL Attack Actually, I got it wrong in my previous mail. The feature should be working. There is a ticket describing

Re: [Resin-interest] BEAST SSL Attack

2012-12-05 Thread Paul Cowan
] BEAST SSL Attack Actually, I got it wrong in my previous mail. The feature should be working. There is a ticket describing the feature: http://bugs.caucho.com/view.php?id=3593 On Tue, Dec 4, 2012 at 7:00 PM, Knut Forkalsrud knut-cau...@forkalsrud.org wrote: In the days of Resin

Re: [Resin-interest] BEAST SSL Attack

2012-12-04 Thread Knut Forkalsrud
In the days of Resin 2.1.4 and onwardshttp://www.caucho.com/resin-3.1/changes/changes-2.xtpthere was such a feature, however it seems to have lapsed. I remember because there was a similar issue with MSIE http://support.microsoft.com/default.aspx?scid=kb;en-us;Q305217. I my good old copy of

Re: [Resin-interest] BEAST SSL Attack

2012-12-04 Thread Knut Forkalsrud
Actually, I got it wrong in my previous mail. The feature should be working. There is a ticket describing the feature: http://bugs.caucho.com/view.php?id=3593 On Tue, Dec 4, 2012 at 7:00 PM, Knut Forkalsrud knut-cau...@forkalsrud.orgwrote: In the days of Resin 2.1.4 and

[Resin-interest] BEAST SSL Attack

2012-12-03 Thread Aaron Freeman
For PCI compliance we are supposed to address the SSL BEAST attack by prioritizing SSL cipher suites. Any clue how to do that with JSSE? We are using JSSE because we run Resin uncompiled. Am I correct in thinking that in order to run OpenSSL we HAVE to compile Resin? Or is there a way to