Netware Webserver - Apache2 Security SSLv2

This is Interesting: Free IT Magazines  
Home > Archive > Netware Webserver > October 2005 > Apache2 Security SSLv2





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Apache2 Security SSLv2
nbrooks@waukeshabank.com

2005-10-04, 5:46 pm

Morning,

I am looking into hardening the Apache2 web server on a Netware 6.5 SP3
server. I am currently running Apache 2.0.54, with PHP5, etc.

Normally in apache2 you are able to configure the SSL properties either
through mod_ssl.conf, ssl.conf, or httpd.conf. When I say configure the
properties I am reffering to adding the following:

SSLProtocol -ALL +SSLv3 +TLSv1
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA
:+HIGH:+MEDIUM

When I add the above lines to the httpd.conf it detects an error on the
config file, and will not let me run apache. I also notice that there is
not ssl.conf, or mod_ssl anymore. I remeber that mod_ssl isn't used
anymore, but what took its place, and can it be configured to allow only
certain types of SSL? Any ideas would be helpful, thanks!

- Nathan Brooks
Automatic reply

2005-10-11, 7:45 am

Nbrooks,

It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.

Has your problem been resolved? If not, you might try one of the following options:

- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)

Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html

If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.

Good luck!

Your Novell Product Support Forums Team
http://support.novell.com/forums/


nbrooks@waukeshabank.com

2005-10-12, 5:55 pm

Any ideas anyone? Do I need to clarify anything. Let me know

- Nathan


> Nbrooks,
>
> It appears that in the past few days you have not received a response to

your
> posting. That concerns us, and has triggered this automated reply.
>
> Has your problem been resolved? If not, you might try one of the

following options:
>
> - Do a search of our knowledgebase at

http://support.novell.com/search/kb_index.jsp
> - Check all of the other support tools and options available at
> http://support.novell.com.
> - You could also try posting your message again. Make sure it is posted

in the
> correct newsgroup. (http://support.novell.com/forums)
>
> Be sure to read the forum FAQ about what to expect in the way of responses:
> http://support.novell.com/forums/faq_general.html
>
> If this is a reply to a duplicate posting, please ignore and accept our

apologies
> and rest assured we will issue a stern reprimand to our posting bot.
>
> Good luck!
>
> Your Novell Product Support Forums Team
> http://support.novell.com/forums/
>
>


Andy Thompson (SysOp)

2005-10-12, 5:55 pm

nbrooks@waukeshabank.com wrote:
> Any ideas anyone? Do I need to clarify anything. Let me know


Might try posting in the developer apache forum.
news://developer-forums.novell.com

Don't believe that SSL on netware supports the SSLProtocol directive though.

-andy
Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com