Re: [Resin-interest] BEAST SSL Attack

2013-02-12 Thread Aaron Freeman
[mailto:resin- mailto:interest-boun...@caucho.com interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Monday, January 14, 2013 2:01 PM To: 'General Discussion for the Resin application server' Subject: Re: [Resin-interest] BEAST SSL Attack Still needing a little assistance on this one. Thanks

Re: [Resin-interest] BEAST SSL Attack

2013-01-18 Thread Aaron Freeman
application server' Subject: Re: [Resin-interest] BEAST SSL Attack Hmm, we were able to swap out jsse for openssl and get that working without any issues using the snapshot you recommend below. However when we add honor-cipher-order under the openssl node, we get this error: [root@alpha

Re: [Resin-interest] BEAST SSL Attack

2013-01-18 Thread Paul Cowan
, January 14, 2013 2:01 PM To: 'General Discussion for the Resin application server' Subject: Re: [Resin-interest] BEAST SSL Attack Still needing a little assistance on this one. Thanks, Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com

Re: [Resin-interest] BEAST SSL Attack

2013-01-18 Thread Aaron Freeman
- mailto:interest-boun...@caucho.com interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Monday, January 14, 2013 2:01 PM To: 'General Discussion for the Resin application server' Subject: Re: [Resin-interest] BEAST SSL Attack Still needing a little assistance on this one. Thanks, Aaron

Re: [Resin-interest] BEAST SSL Attack

2013-01-10 Thread Aaron Freeman
? Thanks, Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] On Behalf Of Scott Ferguson Sent: Tuesday, January 08, 2013 7:42 PM To: resin-interest@caucho.com Subject: Re: [Resin-interest] BEAST SSL Attack On 1/5/13 5:14 PM, Keith Fetterman

Re: [Resin-interest] BEAST SSL Attack

2013-01-08 Thread Scott Ferguson
*From:*resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] *On Behalf Of *Aaron Freeman *Sent:* Wednesday, December 05, 2012 10:51 AM *To:* 'General Discussion for the Resin application server' *Subject:* Re: [Resin-interest] BEAST SSL Attack Very good, I appreciate

Re: [Resin-interest] BEAST SSL Attack

2013-01-05 Thread Keith Fetterman
application server' *Subject:* Re: [Resin-interest] BEAST SSL Attack Very good, I appreciate the feedback. Thanks, Aaron *From:*resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] *On Behalf Of *Paul Cowan *Sent:* Wednesday, December 05, 2012 9:02 AM *To:* General

Re: [Resin-interest] BEAST SSL Attack

2013-01-02 Thread Scott Ferguson
Thanks, Aaron *From:*resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] *On Behalf Of *Aaron Freeman *Sent:* Wednesday, December 05, 2012 10:51 AM *To:* 'General Discussion for the Resin application server' *Subject:* Re: [Resin-interest] BEAST SSL Attack Very good, I

Re: [Resin-interest] BEAST SSL Attack

2013-01-02 Thread Aaron Freeman
Thanks, Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] On Behalf Of Aaron Freeman Sent: Wednesday, December 05, 2012 10:51 AM To: 'General Discussion for the Resin application server' Subject: Re: [Resin-interest] BEAST SSL Attack Very good

Re: [Resin-interest] BEAST SSL Attack

2012-12-05 Thread Aaron Freeman
...@caucho.com] On Behalf Of Knut Forkalsrud Sent: Tuesday, December 04, 2012 9:31 PM To: General Discussion for the Resin application server Subject: Re: [Resin-interest] BEAST SSL Attack Actually, I got it wrong in my previous mail. The feature should be working. There is a ticket describing

Re: [Resin-interest] BEAST SSL Attack

2012-12-05 Thread Paul Cowan
?id=53481 Any other ideas for Resin? Aaron From: resin-interest-boun...@caucho.com [mailto:resin-interest-boun...@caucho.com] On Behalf Of Knut Forkalsrud Sent: Tuesday, December 04, 2012 9:31 PM To: General Discussion for the Resin application server Subject: Re: [Resin-interest

Re: [Resin-interest] BEAST SSL Attack

2012-12-04 Thread Knut Forkalsrud
In the days of Resin 2.1.4 and onwardshttp://www.caucho.com/resin-3.1/changes/changes-2.xtpthere was such a feature, however it seems to have lapsed. I remember because there was a similar issue with MSIE http://support.microsoft.com/default.aspx?scid=kb;en-us;Q305217. I my good old copy of

Re: [Resin-interest] BEAST SSL Attack

2012-12-04 Thread Knut Forkalsrud
Actually, I got it wrong in my previous mail. The feature should be working. There is a ticket describing the feature: http://bugs.caucho.com/view.php?id=3593 On Tue, Dec 4, 2012 at 7:00 PM, Knut Forkalsrud knut-cau...@forkalsrud.orgwrote: In the days of Resin 2.1.4 and