[users@httpd] Re: Alternative for Apache webserver Diffie-Hellman encryption to permit SSL decryption

[sunhux G <su...@gmail.com>]

Note that in my current Apache config file, there's a line below which does not
mention anything on Diffie-Hellman, so my guess is Apache must have selected
/enabled DH by default.  How can I explicitly turn it off?
    SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM

I'm thinking of using TLS_RSA_WITH_AES_256_CBC_SHA
encryption.  Kindly advise what's the syntax to put into the
Apache .conf file.

Any security consequence or network performance impact
from using this new encryption?

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
   "   from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org