Re: [users@httpd] SSL cipher suite modification

2011-12-09 Thread aparna Puram
Hello Igor/Matus, Issue is resolved for now after adding the cipher that our client support. Resolution : They have given the list of ciphers that they support. I have tried using once of the cipher(DES-CBC-SHA) that they said they support. But with this they were unable to connect. Then I have

Re: [users@httpd] SSL cipher suite modification

2011-12-08 Thread Matus UHLAR - fantomas
On 08.12.11 00:38, aparna Puram wrote: I understand from your mail that the following 2 cipher suites will work with the existing and the new clinet configurations. Kindly correct me if I m wrong. 1-->!ADH:!EXPORT56:DES-CBC-SHA:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL 2-->!ADH:!MD5:DES-CBC

Re: [users@httpd] SSL cipher suite modification

2011-12-07 Thread aparna Puram
Hello Igor, Thanks a lot for excellent suggestion... We will raise this concern to our client. However, There are many third party servers that are connecting to our webserver, This will take time I guess. Hence we will try configuring the following for time being and check if the new client wit

Re: [users@httpd] SSL cipher suite modification

2011-12-07 Thread Igor Galić
- Original Message - > Hi Igor, > > Thanks a zillion. > > I understand from your mail that the following 2 cipher suites will > work with the existing and the new clinet configurations. > > Kindly correct me if I m wrong. > > 1-->!ADH:!EXPORT56:DES-CBC-SHA:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv

Re: [users@httpd] SSL cipher suite modification

2011-12-07 Thread aparna Puram
Hi Igor, Thanks a zillion. I understand from your mail that the following 2 cipher suites will work with the existing and the new clinet configurations. Kindly correct me if I m wrong. 1-->!ADH:!EXPORT56:DES-CBC-SHA:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL 2-->!ADH:!MD5:DES-CBC-SHA:RC4+RSA

Re: [users@httpd] SSL cipher suite modification

2011-12-07 Thread Igor Galić
- Original Message - > Hello , > > Currently we are using the following ciphersuite in our httpd.conf > file. > > SSLCipherSuite > !ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL > > But our new client does not support the RC4+RSA cipher tag. They > support DES-CBC-SHA tag. >

[users@httpd] SSL cipher suite modification

2011-12-06 Thread aparna Puram
Hello , Currently we are using the following ciphersuite in our httpd.conf file. SSLCipherSuite !ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL But our new client does not support the RC4+RSA cipher tag. They support DES-CBC-SHA tag. However, There are many other clinets using the