SSL drown vulnerability?

List overview All Threads
Download

newer

older

default server answer when using...

ipv6 question

Vincent Fox

3 Mar 2016 3 Mar '16

7:11 p.m.

Hi, I am just reading up on Drown SSL vulnerability. What is everyone doing with regards to locking down Perdition? Thanks!

Attachments:

attachment.html (text/html — 583 bytes)

Show replies by date

Vincent Fox

3 Mar 3 Mar

8:56 p.m.

To answer my own question, we will be updating our configs to define a cipher list which disables SSLv2. It seems this should address concerns. ________________________________ From: Perdition-users <perdition-users-bounces(a)vergenet.net> on behalf of Vincent Fox <vbfox(a)ucdavis.edu> Sent: Thursday, March 3, 2016 11:11 AM To: Perdition-users(a)vergenet.net Subject: [PERDITION-USERS] SSL drown vulnerability? Hi, I am just reading up on Drown SSL vulnerability. What is everyone doing with regards to locking down Perdition? Thanks!

David Severance

9:07 p.m.

There are also some patches to improve cipher lists and capabilities. I've been hoping for a release that rolls all that stuff up as a general release for awhile. Simon, any chance of that happening soon? thanks, David On 3/3/2016 11:11 AM, Vincent Fox wrote:

...

Hi, I am just reading up on Drown SSL vulnerability. What is everyone doing with regards to locking down Perdition? Thanks! ______________________________________________ Perdition-users mailing list Perdition-users(a)vergenet.net https://lists.vergenet.net/listinfo/perdition-users

-- David Severance Enterprise Unix Services Office of Information Technology (949) 824-7552 sev(a)uci.edu

Simon Horman

11:23 p.m.

Hi David, Hi All, sorry for being so slow. Yes, I'll see about making a release. On Thu, Mar 03, 2016 at 01:07:57PM -0800, David Severance wrote:

...

-- David Severance Enterprise Unix Services Office of Information Technology (949) 824-7552 sev(a)uci.edu

...

______________________________________________ Perdition-users mailing list Perdition-users(a)vergenet.net https://lists.vergenet.net/listinfo/perdition-users

2977

days inactive

2977

days old

perdition-users@vergenet.net

Manage subscription

3 comments

3 participants

tags (0)

participants (3)

David Severance
Simon Horman
Vincent Fox