[Ach] Apache/2.2.22 (Wheezy) + FS in IE11

Axel Hübl axel.huebl at web.de
Wed Jan 8 00:15:51 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 08.01.2014 00:07, Kurt Roeckx wrote:
> On Tue, Jan 07, 2014 at 11:57:01PM +0100, Axel Hübl wrote:
>> Hi Kurt,
>> 
>> that's on for sure, but ssllabs only shows the ciphers:
>> 
>>> Cipher Suites (SSL 3+ suites in server-preferred order, then
>>> SSL 2 suites where used)
>>> 
>>> TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 
>>> TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 
>>> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 
>>> TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 
>>> TLS_DHE_RSA_WITH_AES_256_CBC_SHA
>>> TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA
>>> TLS_RSA_WITH_AES_128_CBC_SHA
>> 
>> so I guess its about the "old" apache?
> 
> That's most likely an apache 2.2 version then?  The version in 
> wheezy doesn't do ECDHE, but we might backport that.  The version 
> in Jessie does.
> 
> 
> Kurt

Yes, it is only a 2.2.22 in wheezy right now.

> The version in wheezy doesn't do ECDHE, but we might backport
> that.
Well, that would be great! :)

(Even if I have to choose between:
   no FS for IE11 vs
   no security patches for backports vs
   full testing system on a production server)

I also checked my "openssl ciphers -V" on wheezy again and ECDHE is
supported there, too.

Best,
Axel
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
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=+TsD
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3740 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.cert.at/pipermail/ach/attachments/20140108/2e6915f4/attachment.bin>


More information about the Ach mailing list