You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by FHDATA <fh...@unm.edu> on 2018/01/10 23:27:24 UTC

[users@httpd] disabling RC4 in apache 2.2.x


hello


  :RC4+RSA:  appears in SSLCipherSuite of apache 2.2.15's ssl.conf


to disable  RC4, will this be enough:


        :!RC4+RSA:


or a different syntax is needed?



thank you,
F-



---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] disabling RC4 in apache 2.2.x

Posted by FHDATA <fh...@unm.edu>.
On Thu, 11 Jan 2018, Daniel wrote:

> check the output of your cipher-spec changes easily with:
>
> openssl ciphers -v 'XXXXX:!RC4+RSA:XXXXXX'



bob=$(egrep "^SSLCipherSuite "  /etc/httpd/conf.d/ssl.conf)

openssl ciphers -v $bob
<lists all the ciphers>


openssl ciphers -v $bob| egrep -iv rc4
<no output>


i assume that's all good then ...


thank you
F-






>
> 2018-01-11 0:27 GMT+01:00 FHDATA <fh...@unm.edu>:
>>
>>
>> hello
>>
>>
>>  :RC4+RSA:  appears in SSLCipherSuite of apache 2.2.15's ssl.conf
>>
>>
>> to disable  RC4, will this be enough:
>>
>>
>>        :!RC4+RSA:
>>
>>
>> or a different syntax is needed?
>>
>>
>>
>> thank you,
>> F-
>>
>>
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>
>
>
> -- 
> Daniel Ferradal
> IT Specialist
>
> email         dferradal at gmail.com
> linkedin     es.linkedin.com/in/danielferradal
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org


Re: [users@httpd] disabling RC4 in apache 2.2.x

Posted by Daniel <df...@gmail.com>.
check the output of your cipher-spec changes easily with:

openssl ciphers -v 'XXXXX:!RC4+RSA:XXXXXX'

2018-01-11 0:27 GMT+01:00 FHDATA <fh...@unm.edu>:
>
>
> hello
>
>
>  :RC4+RSA:  appears in SSLCipherSuite of apache 2.2.15's ssl.conf
>
>
> to disable  RC4, will this be enough:
>
>
>        :!RC4+RSA:
>
>
> or a different syntax is needed?
>
>
>
> thank you,
> F-
>
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>



-- 
Daniel Ferradal
IT Specialist

email         dferradal at gmail.com
linkedin     es.linkedin.com/in/danielferradal

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org