Re: [users@httpd] SSL cipher suite modification

2011-12-09 Thread aparna Puram
Hello Igor/Matus, Issue is resolved for now after adding the cipher that our client support. Resolution : They have given the list of ciphers that they support. I have tried using once of the cipher(DES-CBC-SHA) that they said they support. But with this they were unable to connect. Then I

Re: [users@httpd] SSL cipher suite modification

2011-12-08 Thread Matus UHLAR - fantomas
On 08.12.11 00:38, aparna Puram wrote: I understand from your mail that the following 2 cipher suites will work with the existing and the new clinet configurations. Kindly correct me if I m wrong. 1--!ADH:!EXPORT56:DES-CBC-SHA:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

Re: [users@httpd] SSL cipher suite modification

2011-12-07 Thread Igor Galić
- Original Message - Hello , Currently we are using the following ciphersuite in our httpd.conf file. SSLCipherSuite !ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL But our new client does not support the RC4+RSA cipher tag. They support DES-CBC-SHA tag. However,

Re: [users@httpd] SSL cipher suite modification

2011-12-07 Thread aparna Puram
Hi Igor, Thanks a zillion. I understand from your mail that the following 2 cipher suites will work with the existing and the new clinet configurations. Kindly correct me if I m wrong. 1--!ADH:!EXPORT56:DES-CBC-SHA:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL

Re: [users@httpd] SSL cipher suite modification

2011-12-07 Thread Igor Galić
- Original Message - Hi Igor, Thanks a zillion. I understand from your mail that the following 2 cipher suites will work with the existing and the new clinet configurations. Kindly correct me if I m wrong.

Re: [users@httpd] SSL cipher suite modification

2011-12-07 Thread aparna Puram
Hello Igor, Thanks a lot for excellent suggestion... We will raise this concern to our client. However, There are many third party servers that are connecting to our webserver, This will take time I guess. Hence we will try configuring the following for time being and check if the new client

[users@httpd] SSL cipher suite modification

2011-12-06 Thread aparna Puram
Hello , Currently we are using the following ciphersuite in our httpd.conf file. SSLCipherSuite !ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL But our new client does not support the RC4+RSA cipher tag. They support DES-CBC-SHA tag. However, There are many other clinets using the