Re: [gentoo-user] disable SSLv3 in apache2?

2014-08-11 Thread Michael Orlitzky
On 08/10/2014 11:01 AM, Grant wrote: >>> I recently upgraded from apache-2.2.27 to apache-2.2.27-r4 and >>> etc-update wanted to add the following directive to the default SSL >>> vhost: >>> >>> SSLProtocol ALL -SSLv2 -SSLv3 >>> > > Isn't it a browser compatibility issue though? Are there browser

Re: [gentoo-user] disable SSLv3 in apache2?

2014-08-11 Thread Grant
>> I recently upgraded from apache-2.2.27 to apache-2.2.27-r4 and >> etc-update wanted to add the following directive to the default SSL >> vhost: >> >> SSLProtocol ALL -SSLv2 -SSLv3 >> >> I had already disabled SSLv2 (security issue?) but this also disables >> SSLv3. Could that cause a compatibil

Re: [gentoo-user] disable SSLv3 in apache2?

2014-08-09 Thread staticsafe
On 8/9/2014 14:59, Grant wrote: > I recently upgraded from apache-2.2.27 to apache-2.2.27-r4 and > etc-update wanted to add the following directive to the default SSL > vhost: > > SSLProtocol ALL -SSLv2 -SSLv3 > > I had already disabled SSLv2 (security issue?) but this also disables > SSLv3. Cou

[gentoo-user] disable SSLv3 in apache2?

2014-08-09 Thread Grant
I recently upgraded from apache-2.2.27 to apache-2.2.27-r4 and etc-update wanted to add the following directive to the default SSL vhost: SSLProtocol ALL -SSLv2 -SSLv3 I had already disabled SSLv2 (security issue?) but this also disables SSLv3. Could that cause a compatibility issue? - Grant