I was thinking about creating an open source product using C# ASP.Net that allows people using a web browser or mobile device (with a web browser) to connect to the iPROsoft/LEVESYS software package. After discussing this with a work colleague, I found the project would infringe on the intellectual property rights of iPROsoft/LEVESYS, so unfortunately I will have to abandon the idea. The search for a C# ASP.Net project continues.
Poodle is a security vulnerability that has been found in SSLv3. Since SSL is over ten years old, and the only browsers that support it as the strongest version of encryption are IE6 and older, in my humble opinion it is safe to turn it off. Let's start with the easy one, Linux, in particular CentOS. NB you will most likely need to be root or be part of the sudo group to make the following changes 1) Open the ssl.config file with your favourite text editor. In Red Hat based distributions like CentOS you should find it in /etc/httpd/mods-available/ssl.conf 2) Find the line starting with SSLProtocol 3) Change it to SSLProtocol all -SSLv2 -SSLv3 This will allow all ciphers expect SSLv2 and SSLv3 4) Save ssl.conf and exit your text editor 5) Restart Apache by running the command service httpd restart 6) ...
Comments
Post a Comment