[Systems] CAcert certificate expiring

Bernie Innocenti bernie at codewiz.org
Mon Feb 14 17:26:16 EST 2011


On Mon, 2011-02-14 at 21:06 +0100, Sascha Silbe wrote: 
> Excerpts from Bernie Innocenti's message of Mon Feb 14 20:42:18 +0100 2011:
> 
> > If you want to tweak Apache a little bit, you might also want to disable
> > SSL3 and the old SSL2 way of performing a handshake (referred to as SSL
> > 2.0+ Upgrade Support). All modern and also old browsers support TLS1.0
> > so there is no problem with compatibility
> 
> As I wrote before, Epiphany (and potentially other Webkit/GTK based
> browsers) does NOT work with TLS only servers. Take a look at the ticket
> [1]; I reported this just a few days ago [2].

But it seems to work for me!

I just tried with Epiphany 2.30.6 and libsoup 2.30.2. See for yourself:

  https://codewiz.org/

(I'm not actually 100% sure that Apache has turned off all the SSLv2 and
SSLv3 modes. Is there an openssl command which reports what a server
supports?)

-- 
   // Bernie Innocenti - http://codewiz.org/
 \X/  Sugar Labs       - http://sugarlabs.org/




More information about the Systems mailing list