[Xitami] Disabling sslv2

[Thomas J. Hruska]

At 10:22 AM 10/21/2003 -0400, Bowden, Zeb writeth:
>
>Has anyone tried to disable sslv2 in xitami pro? I'm running 2.4d10 and I
can't seem to get it to completely disable sslv2
>
>I've tried setting protocol=sslv3 in my sslhttp.cfs file but that doesn't
seem to work, I can still connect using sslv2 and IE
>
>With sslv2 as the only protocol enabled in Opera I can't connect using
https; however same setup and IE it will connect just fine and I see this
in the debug.log "Connection: SSLv2: RC4-MD5, none"
>
>Anyone have any ideas on what I'm missing? 
>
>Thanks! 
>
>
>Zeb Bowden 
>VT.SETI.IAD.MIG:Application Developer 
>http://vtmig.w2k.vt.edu 


You have to disable certain cryptography options at compile-time with
OpenSSL to disable those algorithms.  There are special sections of code in
OpenSSL that handle IE.  You have to disable those IE options, but then IE
may or may not work with a server not using the workarounds for bugs in IE.

Hope this helps!


          Thomas J. Hruska -- shinelight@shininglightpro.com
Shining Light Productions -- "Meeting the needs of fellow programmers"
                  http://www.shininglightpro.com/

`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~
  Tired of expensive $5,000+ web application servers like ColdFusion?
  Try Nuclear Vision today!

  http://internal.shininglightpro.com/search.nvm?searchname=Nuclear+Vision

  Announcing Nuclear Vision v1.1, a superior scripting language with
powerful features in a HTML-like syntax.