Re: [users@httpd] mod_ssl, poodle and SSLv2Hello

2014-10-29 Thread Jeff Trawick
On Fri, Oct 17, 2014 at 1:49 PM, Matthew Hughes wrote: > Many SSL clients, notably JDK 6, use the SSLv2Hello protocol to handshake > with the server. Using this protocol does *not* mean you are using SSL 2.0 > or 3.0 for that matter; it is merely a handshake to determine *which* > protocol to us

[users@httpd] mod_ssl, poodle and SSLv2Hello

2014-10-17 Thread Matthew Hughes
Many SSL clients, notably JDK 6, use the SSLv2Hello protocol to handshake with the server. Using this protocol does *not* mean you are using SSL 2.0 or 3.0 for that matter; it is merely a handshake to determine *which* protocol to use. [http://tools.ietf.org/html/rfc5246#appendix-E.2] However