Is it sufficient to change:

 +SSLv2

to 

 -SSLv2

in SSLCipherSuite to disable SSLv2 in modssl? Is that enough to at least
temporarily limit the exposure to the latest openssl vulnerability while I
upgrade multiple machines?

Thanks,
Adi
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to