I am trying to modify the modssl settings so that only 128-bit encryption 
is allowed.  I have read the HOW-TO page at
<http://www.modssl.org/docs/2.6/ssl_howto.html#ToC3>

...but when I try what it suggests, replacing my SSLCipherSuite line with 
the following,
SSLProtocol all
SSLCipherSuite HIGH:MEDIUM

It doesn't work.  What all do I need to do to allow 128-bit only 
encryption?  By the way, the title of this HOW-TO is also vague.  What 
exactly does Strong Encryption Only mean?

Here is what my current SSLCipherSuite line (the installed default) looks 
like:
SSLCipherSuite ALL:!ADH:!EXP56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

Basically what happens if I try to modify it is that either nobody can 
access anything, or 40-bit encryption works anyway...

Thanks in advance,
Ted Fines
Macalester College
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to