[Systems] CAcert certificate expiring
Bernie Innocenti
bernie at codewiz.org
Mon Feb 14 17:26:16 EST 2011
On Mon, 2011-02-14 at 21:06 +0100, Sascha Silbe wrote:
> Excerpts from Bernie Innocenti's message of Mon Feb 14 20:42:18 +0100 2011:
>
> > If you want to tweak Apache a little bit, you might also want to disable
> > SSL3 and the old SSL2 way of performing a handshake (referred to as SSL
> > 2.0+ Upgrade Support). All modern and also old browsers support TLS1.0
> > so there is no problem with compatibility
>
> As I wrote before, Epiphany (and potentially other Webkit/GTK based
> browsers) does NOT work with TLS only servers. Take a look at the ticket
> [1]; I reported this just a few days ago [2].
But it seems to work for me!
I just tried with Epiphany 2.30.6 and libsoup 2.30.2. See for yourself:
https://codewiz.org/
(I'm not actually 100% sure that Apache has turned off all the SSLv2 and
SSLv3 modes. Is there an openssl command which reports what a server
supports?)
--
// Bernie Innocenti - http://codewiz.org/
\X/ Sugar Labs - http://sugarlabs.org/
More information about the Systems
mailing list