Advertisement
Guest User

Untitled

a guest
Oct 24th, 2014
118
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.85 KB | None | 0 0
  1. #working example site with SSLv3 disabled:
  2. My-iMac:~ me$ openssl s_client -connect facebook.com:443
  3. CONNECTED(00000003)
  4. depth=1 /C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert High Assurance CA-3
  5. ....
  6.  
  7. #My site with SSLv3 disabled:
  8. My-iMac:~ me$ openssl s_client -connect site.company.com:443
  9. CONNECTED(00000003)
  10. 66904:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:/SourceCache/OpenSSL098/OpenSSL098-52/src/ssl/s23_lib.c:182:
  11.  
  12. #Same site, now with -tls1 on command line, works:
  13. My-iMac:~ me$ openssl s_client -connect site.company.com:443 -tls1
  14. CONNECTED(00000003)
  15. depth=1 /C=US/O=GeoTrust Inc./CN=RapidSSL SHA256 CA - G3
  16. ....
  17.  
  18. SSLEngine on
  19. SSLProtocol -all +TLSv1
  20. SSLHonorCipherOrder On
  21. SSLCipherSuite RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM:!SSLV2:!eNULL
  22. SSLCertificateFile /opt/ca/cert.pem
  23. SSLCertificateChainFile /opt/ca/cert.pem
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement