Gentoo Archives: gentoo-user

From: Grant <emailgrant@×××××.com>
To: Gentoo mailing list <gentoo-user@l.g.o>
Subject: Re: [gentoo-user] {OT} RAM & apache MaxClients (rock & a hard place)
Date: Sun, 10 Mar 2013 21:26:24
Message-Id: CAN0CFw2VEc8_j9GjHm_Pw9M_DvC8HjTqYQ91yMU0JJW=Z7rAAw@mail.gmail.com
In Reply to: Re: [gentoo-user] {OT} RAM & apache MaxClients (rock & a hard place) by Nilesh Govindrajan
1 >> Thanks for the link. Which ssl_ciphers do you use? Which one does
2 >> openssl show you're using? I have:
3 >>
4 >> ssl_ciphers ALL:!aNULL:!ADH:!eNULL:!MEDIUM:!LOW:!EXP:!kEDH:RC4+RSA:+HIGH;
5 >>
6 >> and 'openssl s_client -host HOSTNAME -port 443' shows:
7 >>
8 >> Cipher : ECDHE-RSA-AES256-GCM-SHA384
9 >>
10 >> I also get "Verify return code: 20 (unable to get local issuer
11 >> certificate)" from that command but I'm guessing that's OK since I get
12 >> the same when using www.google.com as the HOSTNAME.
13 >>
14 >> - Grant
15 >>
16 >
17 > I use exactly the one specified at the blog entry.
18
19 OK but the only one posted in the blog entry is the problematic one:
20
21 ssl_ciphers ALL:!aNULL:!ADH:!eNULL:!MEDIUM:!LOW:!EXP:RC4 RSA: HIGH;
22
23 - Grant