You are viewing a plain text version of this content. The canonical link for it is here.
Posted to cvs@httpd.apache.org by ig...@apache.org on 2010/11/20 22:45:50 UTC
svn commit: r1037337 - in /httpd/httpd/trunk/docs/manual/ssl:
ssl_howto.html.en ssl_howto.html.fr ssl_howto.xml ssl_howto.xml.fr
Author: igalic
Date: Sat Nov 20 21:45:50 2010
New Revision: 1037337
URL: http://svn.apache.org/viewvc?rev=1037337&view=rev
Log:
More fixes on Pr#50307
Modified:
httpd/httpd/trunk/docs/manual/ssl/ssl_howto.html.en
httpd/httpd/trunk/docs/manual/ssl/ssl_howto.html.fr
httpd/httpd/trunk/docs/manual/ssl/ssl_howto.xml
httpd/httpd/trunk/docs/manual/ssl/ssl_howto.xml.fr
Modified: httpd/httpd/trunk/docs/manual/ssl/ssl_howto.html.en
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/ssl/ssl_howto.html.en?rev=1037337&r1=1037336&r2=1037337&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/ssl/ssl_howto.html.en (original)
+++ httpd/httpd/trunk/docs/manual/ssl/ssl_howto.html.en Sat Nov 20 21:45:50 2010
@@ -67,10 +67,7 @@ following directives.</p>
<h2><a name="ciphersuites" id="ciphersuites">Cipher Suites and Enforcing Strong Security</a></h2>
<ul>
-<li><a href="#realssl">How can I create a real SSLv2-only server?</a></li>
<li><a href="#onlystrong">How can I create an SSL server which accepts strong encryption only?</a></li>
-<li><a href="#upgradeenc">How can I create an SSL server which accepts strong encryption only, but allows
-export browsers to upgrade to stronger encryption?</a></li>
<li><a href="#strongurl">How can I create an SSL server which accepts all types of ciphers in general, but
requires a strong cipher for access to a particular URL?</a></li>
</ul>
@@ -80,7 +77,7 @@ only?</a></h3>
<p>The following enables only the strongest ciphers:</p>
<div class="example"><h3>httpd.conf</h3><p><code>
- SSLProtocol all -SSLv3<br />
+ SSLProtocol all -SSLv2<br />
SSLCipherSuite HIGH:!ADH:!EXP:!MD5:!NULL<br />
</code></p></div>
@@ -88,7 +85,7 @@ only?</a></h3>
which are resonably secure, and fast:</p>
<div class="example"><h3>httpd.conf</h3><p><code>
- SSLProtocol all -SSLv3<br />
+ SSLProtocol all -SSLv2<br />
SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!ADH:!EXP:!MD5:!NULL<br />
SSLHonorCipherOrder on
</code></p></div>
Modified: httpd/httpd/trunk/docs/manual/ssl/ssl_howto.html.fr
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/ssl/ssl_howto.html.fr?rev=1037337&r1=1037336&r2=1037337&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/ssl/ssl_howto.html.fr (original)
+++ httpd/httpd/trunk/docs/manual/ssl/ssl_howto.html.fr Sat Nov 20 21:45:50 2010
@@ -74,9 +74,6 @@ de haut niveau</a></h2>
<ul>
<li><a href="#onlystrong">Comment créer un serveur SSL
qui n'accepte que le chiffrement fort ?</a></li>
-<li><a href="#upgradeenc">Comment créer un serveur SSL qui n'accepte que le
-chiffrement fort, mais permet aux navigateurs importés des USA
-d'évoluer vers un chiffrement plus fort ?</a></li>
<li><a href="#strongurl">Comment créer un serveur qui accepte tous les types de
chiffrement en général, mais exige un chiffrement fort pour pouvoir
accéder à une URL particulière ?</a></li>
@@ -89,7 +86,7 @@ que le chiffrement fort ?</a></h3>
<p>Les directives suivantes ne permettent que les
chiffrements de plus haut niveau :</p>
<div class="example"><h3>httpd.conf</h3><p><code>
- SSLProtocol all -SSLv3<br />
+ SSLProtocol all -SSLv2<br />
SSLCipherSuite HIGH:!ADH:!EXP:!MD5:!NULL<br />
</code></p></div>
@@ -98,7 +95,7 @@ que le chiffrement fort ?</a></h3>
<p>Avec la configuration qui suit, vous pouvez activer deux méthodes de chiffrement relativement sécurisées, et rapides :</p>
<div class="example"><h3>httpd.conf</h3><p><code>
- SSLProtocol all -SSLv3<br />
+ SSLProtocol all -SSLv2<br />
SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!ADH:!EXP:!MD5:!NULL<br />
SSLHonorCipherOrder on
<br />
Modified: httpd/httpd/trunk/docs/manual/ssl/ssl_howto.xml
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/ssl/ssl_howto.xml?rev=1037337&r1=1037336&r2=1037337&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/ssl/ssl_howto.xml (original)
+++ httpd/httpd/trunk/docs/manual/ssl/ssl_howto.xml Sat Nov 20 21:45:50 2010
@@ -65,10 +65,7 @@ following directives.</p>
<section id="ciphersuites">
<title>Cipher Suites and Enforcing Strong Security</title>
<ul>
-<li><a href="#realssl">How can I create a real SSLv2-only server?</a></li>
<li><a href="#onlystrong">How can I create an SSL server which accepts strong encryption only?</a></li>
-<li><a href="#upgradeenc">How can I create an SSL server which accepts strong encryption only, but allows
-export browsers to upgrade to stronger encryption?</a></li>
<li><a href="#strongurl">How can I create an SSL server which accepts all types of ciphers in general, but
requires a strong cipher for access to a particular URL?</a></li>
</ul>
@@ -78,7 +75,7 @@ requires a strong cipher for access to a
only?</title>
<p>The following enables only the strongest ciphers:</p>
<example><title>httpd.conf</title>
- SSLProtocol all -SSLv3<br />
+ SSLProtocol all -SSLv2<br />
SSLCipherSuite HIGH:!ADH:!EXP:!MD5:!NULL<br />
</example>
@@ -86,7 +83,7 @@ only?</title>
which are resonably secure, and fast:</p>
<example><title>httpd.conf</title>
- SSLProtocol all -SSLv3<br />
+ SSLProtocol all -SSLv2<br />
SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!ADH:!EXP:!MD5:!NULL<br />
SSLHonorCipherOrder on
</example>
Modified: httpd/httpd/trunk/docs/manual/ssl/ssl_howto.xml.fr
URL: http://svn.apache.org/viewvc/httpd/httpd/trunk/docs/manual/ssl/ssl_howto.xml.fr?rev=1037337&r1=1037336&r2=1037337&view=diff
==============================================================================
--- httpd/httpd/trunk/docs/manual/ssl/ssl_howto.xml.fr (original)
+++ httpd/httpd/trunk/docs/manual/ssl/ssl_howto.xml.fr Sat Nov 20 21:45:50 2010
@@ -70,9 +70,6 @@ de haut niveau</title>
<ul>
<li><a href="#onlystrong">Comment créer un serveur SSL
qui n'accepte que le chiffrement fort ?</a></li>
-<li><a href="#upgradeenc">Comment créer un serveur SSL qui n'accepte que le
-chiffrement fort, mais permet aux navigateurs importés des USA
-d'évoluer vers un chiffrement plus fort ?</a></li>
<li><a href="#strongurl">Comment créer un serveur qui accepte tous les types de
chiffrement en général, mais exige un chiffrement fort pour pouvoir
accéder à une URL particulière ?</a></li>
@@ -85,7 +82,7 @@ que le chiffrement fort ?</title>
<p>Les directives suivantes ne permettent que les
chiffrements de plus haut niveau :</p>
<example><title>httpd.conf</title>
- SSLProtocol all -SSLv3<br />
+ SSLProtocol all -SSLv2<br />
SSLCipherSuite HIGH:!ADH:!EXP:!MD5:!NULL<br />
</example>
</section>
@@ -94,7 +91,7 @@ que le chiffrement fort ?</title>
<p>Avec la configuration qui suit, vous pouvez activer deux méthodes de chiffrement relativement sécurisées, et rapides :</p>
<example><title>httpd.conf</title>
- SSLProtocol all -SSLv3<br />
+ SSLProtocol all -SSLv2<br />
SSLCipherSuite RC4-SHA:AES128-SHA:HIGH:!ADH:!EXP:!MD5:!NULL<br />
SSLHonorCipherOrder on
<br />