Example lines for the config file.
ok?
-Otto
Index: httpd.conf
===
RCS file: /cvs/src/usr.sbin/httpd/conf/httpd.conf,v
retrieving revision 1.26
diff -u -p -r1.26 httpd.conf
--- httpd.conf 3 Jun 2009 18:28:21 - 1.2
On Wed, Jul 10, 2013 at 10:28:32AM +0200, Otto Moerbeek wrote:
> On Sun, Jul 07, 2013 at 10:17:11PM -0700, Aaron Stellman wrote:
>
> > On Mon, Jul 08, 2013 at 07:06:43AM +0200, Otto Moerbeek wrote:
> > > I think you missed the renogiate case. Anyway, I posted almost the
> > > same diff some time
On Sun, Jul 07, 2013 at 10:17:11PM -0700, Aaron Stellman wrote:
> On Mon, Jul 08, 2013 at 07:06:43AM +0200, Otto Moerbeek wrote:
> > I think you missed the renogiate case. Anyway, I posted almost the
> > same diff some time ago.
>
> You're right -- renegotiate case was missed. Your patch from Apr
On Mon, Jul 08, 2013 at 07:06:43AM +0200, Otto Moerbeek wrote:
> I think you missed the renogiate case. Anyway, I posted almost the
> same diff some time ago.
You're right -- renegotiate case was missed. Your patch from April looks
fine to me. It would be beneficial to have it committed.
Thanks
On Sun, Jul 07, 2013 at 08:18:18PM -0700, Aaron Stellman wrote:
> As you may or may not know, SSLHonorCipherOrder is supported since
> apache 2.1.
>
> This diff ports this feature to OpenBSD's httpd. Its effects can be
> tested @ https://www.ssllabs.com/ssltest/analyze.html?d=example.com by
> pla
On Sun, Jul 07, 2013 at 08:40:52PM -0700, Aaron Stellman wrote:
> On Mon, Jul 08, 2013 at 05:30:22AM +0200, J??r??mie Courr??ges-Anglas wrote:
> > Otto Moerbeek had already done work about this, but no one commented on
> > the mailing-list: http://marc.info/?l=openbsd-tech&m=136670100711787&w=2
>
On Mon, Jul 08, 2013 at 05:30:22AM +0200, J??r??mie Courr??ges-Anglas wrote:
> Otto Moerbeek had already done work about this, but no one commented on
> the mailing-list: http://marc.info/?l=openbsd-tech&m=136670100711787&w=2
I am sorry I've missed his earlier email.
> > This diff is adapted from
Aaron Stellman writes:
> As you may or may not know, SSLHonorCipherOrder is supported since
> apache 2.1.
>
> This diff ports this feature to OpenBSD's httpd. Its effects can be
> tested @ https://www.ssllabs.com/ssltest/analyze.html?d=example.com by
> playing with SSLHonorCipherOrder/SSLCipherSu
As you may or may not know, SSLHonorCipherOrder is supported since
apache 2.1.
This diff ports this feature to OpenBSD's httpd. Its effects can be
tested @ https://www.ssllabs.com/ssltest/analyze.html?d=example.com by
playing with SSLHonorCipherOrder/SSLCipherSuite directives.
SSLHonorCipherOrder
