Re: base apache and HonorCipherOrder

2013-07-11 Thread Devin Ceartas
Thanks all; I am glad to see this. On Thu, Jul 11, 2013 at 11:35 AM, Joel Sing wrote: > On Mon, 8 Jul 2013, Damien Miller wrote: > > On Sun, 7 Jul 2013, Aaron Stellman wrote: > > > On Tue, Apr 23, 2013 at 09:08:19AM +0200, Otto Moerbeek wrote: > > > > If there is any interest, I might add the m

Re: base apache and HonorCipherOrder

2013-07-11 Thread Joel Sing
On Mon, 8 Jul 2013, Damien Miller wrote: > On Sun, 7 Jul 2013, Aaron Stellman wrote: > > On Tue, Apr 23, 2013 at 09:08:19AM +0200, Otto Moerbeek wrote: > > > If there is any interest, I might add the manual stuff, get ok's and > > > commit it. > > > > I find it useful to have SSLHonorCipherOrder in

Re: base apache and HonorCipherOrder

2013-07-09 Thread Otto Moerbeek
On Mon, Jul 08, 2013 at 01:53:46PM +1000, Damien Miller wrote: > On Sun, 7 Jul 2013, Aaron Stellman wrote: > > > On Tue, Apr 23, 2013 at 09:08:19AM +0200, Otto Moerbeek wrote: > > > If there is any interest, I might add the manual stuff, get ok's and > > > commit it. > > > > I find it useful to

Re: base apache and HonorCipherOrder

2013-07-07 Thread Damien Miller
On Sun, 7 Jul 2013, Aaron Stellman wrote: > On Tue, Apr 23, 2013 at 09:08:19AM +0200, Otto Moerbeek wrote: > > If there is any interest, I might add the manual stuff, get ok's and > > commit it. > > I find it useful to have SSLHonorCipherOrder in OpenBSD's apache. More than that, AFAIK it is ne

Re: base apache and HonorCipherOrder

2013-07-07 Thread Aaron Stellman
On Tue, Apr 23, 2013 at 09:08:19AM +0200, Otto Moerbeek wrote: > If there is any interest, I might add the manual stuff, get ok's and > commit it. I find it useful to have SSLHonorCipherOrder in OpenBSD's apache.

base apache and HonorCipherOrder

2013-04-23 Thread Otto Moerbeek
Hi, SSLHonorCipherOrder is needed by some recommended setups to protect against the beast attack, but only available in newer apaches. So I added it to our apache in base. If there is any interest, I might add the manual stuff, get ok's and commit it. -Otto Index: src/modules/ssl/mod_s