[Xitami] Disabling sslv2

[Bowden, Zeb]

Yeah I've seen the OpenSSL options and the one I want to implement is
NO_SSLv2.
But with Xitami Pro (on Windows anyway) has OpenSSL compiled into the
executable so how would I tell it to use the NO_SSLv2 option?

It looks like the appropriate place would be the sslhttp.cfs file, but
that doesn't seem to work ... Is there another way? Or any way that I
can do it in that file? Or maybe I'm just out of luck?

Thanks!
=20

-----Original Message-----
From: Thomas J. Hruska [mailto:shinelight@shininglightpro.com]=20
Sent: Tuesday, October 21, 2003 6:13 PM
To: xitami@lists.xitami.org
Subject: Re: [Xitami] Disabling sslv2

At 10:22 AM 10/21/2003 -0400, Bowden, Zeb writeth:
>
>Has anyone tried to disable sslv2 in xitami pro? I'm running 2.4d10 and

>I
can't seem to get it to completely disable sslv2
>
>I've tried setting protocol=3Dsslv3 in my sslhttp.cfs file but that=20
>doesn't
seem to work, I can still connect using sslv2 and IE
>
>With sslv2 as the only protocol enabled in Opera I can't connect using
https; however same setup and IE it will connect just fine and I see
this in the debug.log "Connection: SSLv2: RC4-MD5, none"
>
>Anyone have any ideas on what I'm missing?=20
>
>Thanks!=20
>
>
>Zeb Bowden
>VT.SETI.IAD.MIG:Application Developer
>http://vtmig.w2k.vt.edu


You have to disable certain cryptography options at compile-time with
OpenSSL to disable those algorithms.  There are special sections of code
in OpenSSL that handle IE.  You have to disable those IE options, but
then IE may or may not work with a server not using the workarounds for
bugs in IE.

Hope this helps!


          Thomas J. Hruska -- shinelight@shininglightpro.com Shining
Light Productions -- "Meeting the needs of fellow programmers"
                  http://www.shininglightpro.com/

`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'*-~.,_,.~-*'`'
*-~
  Tired of expensive $5,000+ web application servers like ColdFusion?
  Try Nuclear Vision today!

=20
http://internal.shininglightpro.com/search.nvm?searchname=3DNuclear+Visio=
n

  Announcing Nuclear Vision v1.1, a superior scripting language with
powerful features in a HTML-like syntax.

--
Xitami Users Mailing List -- For Xitami support To unsubscribe:
http://lists.xitami.org/mailman/listinfo/xitami