[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Antw: RE: POODLE SSLv3 downgrade attack



Ulrich Windl wrote:
> Related question: If a slapcat of the config database doesn't show a value
> for TLSCipherSuite, does it mean it is some default value?


I'm pretty sure the default depends on the TLS lib used and how it was built
for a certain OS.

=> always set TLSCipherSuite explicitly

To find out which protocols/ciphers can be used with a current installation
use sslscan.

Ciao, Michael.

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature