[BlueOnyx:21393] Re: Apache Webserver SSLCipherSuite - *** published ***

[Colin Jack]

We have a number of customers complaining their websites are down. Reboot server hasn't worked but will check logs when I get in front of a computer. Currently on iPhone.

Anyone else seeing this?

Colin




On Wed, Sep 20, 2017 at 3:26 AM +0200, "Michael Stauber" <mstauber at blueonyx.it<mailto:mstauber at blueonyx.it>> wrote:


Hi all,

As per [BlueOnyx:21355] and [BlueOnyx:21390] I just published an updated
base-admserv and base-apache for 5207R, 5208R and 5209R.

This switches Apache (and AdmServ) to a slightly better set of cipher
suites that provide ECDH secp256r1 for everything that supports elliptic
curves (including most Apple products). For those who don't we fall back
to DH4096 bit, which we preferred before.

I also checked our Sendmail implementation (again) and it's already
good, as it was already prefering usage of ECDH secp256r1 over anything
else.

--
With best regards

Michael Stauber
_______________________________________________
Blueonyx mailing list
Blueonyx at mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.blueonyx.it/pipermail/blueonyx/attachments/20170920/220dc9e6/attachment.html>