Bug#338006: Workaround for OpenSSL 0.9.8 bug in Nessus

2006-01-16 Thread Javier Fernández-Sanguino Peña
Based on the comment made by Jim Paris to bug #338006 I've found that adding the following line to nessusd.conf makes the client able to talk with the server: ssl_cipher_list = SSLv2:-LOW:-EXPORT:RC4+RSA I'm going to add this to the default nessusd.conf to implemente a workaround fix for #343487

Bug#338006: Workaround

2006-01-06 Thread Jim Paris
This bug also breaks subversion (see #336373; the bug was closed but it's still broken). For subversion, which goes through apache, I found that a workaround is to limit the ciphers on the Apache end. Removing all SSLv3 ciphers except RC4 seems to do the trick. For example, my apache2 configurat