Re: [users@httpd] SSL cipher suites

2018-02-18 Thread Michael A. Peters
Yes, I only use ciphers that implement forward secrecy. On 02/18/2018 01:58 PM, David Mehler wrote: Hi, Thanks. Are these ciphers pfs friendly? Thanks. Dave. On 2/18/18, Michael A. Peters wrote: On 02/18/2018 09:00 AM, David Mehler wrote: Hello, I'm looking for recommendations. I'm runni

Re: [users@httpd] SSL cipher suites

2018-02-18 Thread David Mehler
Hi, Thanks. Are these ciphers pfs friendly? Thanks. Dave. On 2/18/18, Michael A. Peters wrote: > On 02/18/2018 09:00 AM, David Mehler wrote: >> Hello, >> >> I'm looking for recommendations. I'm running apache 2.4 and Openssl >> 1.0.2n. I'm looking for the strongest certificates that support >>

Re: [users@httpd] SSL cipher suites

2018-02-18 Thread Michael A. Peters
On 02/18/2018 09:00 AM, David Mehler wrote: Hello, I'm looking for recommendations. I'm running apache 2.4 and Openssl 1.0.2n. I'm looking for the strongest certificates that support TLSV1.2 and PFS. Recommendations/pro/conns welcome. Thanks. Dave. For sites that don't need Tumblr to be abl

[users@httpd] SSL cipher suites

2018-02-18 Thread David Mehler
Hello, I'm looking for recommendations. I'm running apache 2.4 and Openssl 1.0.2n. I'm looking for the strongest certificates that support TLSV1.2 and PFS. Recommendations/pro/conns welcome. Thanks. Dave. # SSL cipher suite 1 SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA