Re: [users@httpd] Enabling Forward secrecy on SSL

2017-03-17 Thread David Mehler
Hello, Try this configuration. If anyone can take a look at this setup if I've missed something or need to get a protocol adjustment let me know. I get an A+ on ssllabs. Hth Dave. httpd-ssl.conf: SSLRandomSeed startup file:/dev/urandom 512 SSLRandomSeed connect file:/dev/urandom 512 # OCSP Stap

Re: [users@httpd] Web sockets support clarification

2017-03-17 Thread Wayne W
Ah yes, sorry my mistake please ignore! On Fri, Mar 17, 2017 at 4:46 PM, Eric Covener wrote: > On Fri, Mar 17, 2017 at 11:46 AM, Wayne W > wrote: > > If the servlet container supports JSR356 (ie. tomcat 8) we only need to > use > > wicket-native-websocket which comprises of wicket-native-websoc

Re: [users@httpd] Web sockets support clarification

2017-03-17 Thread Eric Covener
On Fri, Mar 17, 2017 at 11:46 AM, Wayne W wrote: > If the servlet container supports JSR356 (ie. tomcat 8) we only need to use > wicket-native-websocket which comprises of wicket-native-websocket-core and > wicket-native-websocket-native? You probably meant this for a wicket list (sentt to users

[users@httpd] Web sockets support clarification

2017-03-17 Thread Wayne W
Hi, we are currently using Wicket 6.17 and use a version of Atmosphere jar libraries (not the wicket version). Its never been great and have had lots of production issues with it. I'm looking to replace it with straight web sockets as the fall back long polling etc we never could get to work. Loo

[users@httpd] Enabling Forward secrecy on SSL

2017-03-17 Thread Chunduru, Krishnachaithanya
Hi All, Can someone advise me on how to achieve the below on a server running with Apache SSL enabled. * SSL - Supports Weak Encryption The following protocols should be switched on - TLS 1.2, TLS 1.1, TLS 1.0. SSL 3 and SSL 2 should be disabled. * Weak Configuration - SSL/TL

Re: [users@httpd] ServerAlias limit and conflicts?

2017-03-17 Thread Mitchell Krog Photography
Actually to clarify point 3. That error I stated was due to something else. However I tested the following config and the first virtualhost completely over-rides the second one due to the wildcard. ServerAdmin webmaster@centos.local DocumentRoot /var/www/html/centos ServerName centos