Re: [us...@httpd] SSLProtocol vs SSLCipherSuite

2009-08-19 Thread Toadie
Not quite sure what you want to achieve even though the question is semi-clear. If your real intention is to disallow SSLv2 (which you should in this day and age) and only support SSLv3 and above, you could do this SSLProtocol -ALL +SSLv3 +TLSv1 then follow by ciphers suite e.g. SSLCipherSuit

Re: [us...@httpd] SSLProtocol vs SSLCipherSuite

2009-08-18 Thread Eric Covener
On Tue, Aug 18, 2009 at 10:36 AM, Capstone wrote: > I may not have been clear on my question so I am reposting, hopefully in a > more clear manner,... I apologize if this is bad practice. > > I would like clarification as to whether the SSLProtocol directive is > absolutely necessary when trying to

Re: [us...@httpd] SSLProtocol vs SSLCipherSuite

2009-08-18 Thread Capstone
I may not have been clear on my question so I am reposting, hopefully in a more clear manner,... I apologize if this is bad practice. I would like clarification as to whether the SSLProtocol directive is absolutely necessary when trying to achieve the highest level of security when configur

Re: [us...@httpd] SSLProtocol vs SSLCipherSuite

2009-08-02 Thread André Warnier
De Ren wrote: First time post. I am new to Apache, MySQL, and PHP. That's quite a lot to be new about, all at the same time. An old African proverb says : "To eat an elephant, you must do it one little bit at a time". ... Could someone give me some hint what went wrong, please? Yes. You

Re: [us...@httpd] SSLProtocol vs SSLCipherSuite

2009-08-02 Thread Jonathan Zuckerman
On Sun, Aug 2, 2009 at 6:24 AM, De Ren wrote: > First time post.   I am new to Apache, MySQL, and PHP. > > I've installed Apache (2.2.11), MySQL(5.1.36)and PHP(5.2.10) on my laptop > (operating system: Windows XP Home Edition).  I can see the Apache icon on > the right lower corner, but when the mo

Re: [us...@httpd] SSLProtocol vs SSLCipherSuite

2009-08-02 Thread De Ren
First time post. I am new to Apache, MySQL, and PHP. I've installed Apache (2.2.11), MySQL(5.1.36)and PHP(5.2.10) on my laptop (operating system: Windows XP Home Edition). I can see the Apache icon on the right lower corner, but when the mouse is moved to the icon, the prompt says: "No services

Re: [us...@httpd] SSLProtocol vs SSLCipherSuite

2009-08-01 Thread Matus UHLAR - fantomas
On 27.07.09 09:02, Capstone wrote: > Specifically, will SSLCipherSuite directive take precedence over the > SSLProtocol directive? no. > If I have omitted the SSLProtocol directive entirely. But I have > something like this in my SSLCipherSuite directive, > > SSLCipherSuite TLSv1:SSLv3:+HIGH

[us...@httpd] SSLProtocol vs SSLCipherSuite

2009-07-27 Thread Capstone
I guess I may be confused as to the relationship between these to directives in the Apache 2 httpd.conf file. Specifically, will SSLCipherSuite directive take precedence over the SSLProtocol directive? For Example; If I have omitted the SSLProtocol directive entirely. But I have somethi