Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
Received-SPF: pass (nike.apache.org: domain of hughes.matt@gmail.com
 designates 209.85.216.176 as permitted sender)
From: Matthew Hughes <hughes.matt@gmail.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Message-Id: <E5CE5150-61E8-4342-834E-F79ADDEAB3A1@gmail.com>
Date: Fri, 17 Oct 2014 13:49:10 -0400
To: users@httpd.apache.org
Mime-Version: 1.0 (Mac OS X Mail 8.0 \(1990.1\))
Subject: [users@httpd] mod_ssl, poodle and SSLv2Hello 

Many SSL clients, notably JDK 6, use the SSLv2Hello protocol to =
handshake with the server.  Using this protocol does *not* mean you are =
using SSL 2.0 or 3.0 for that matter; it is merely a handshake to =
determine *which* protocol to use.  =
[http://tools.ietf.org/html/rfc5246#appendix-E.2]

However, in Apache, if you disable SSLv3 support, this apparently =
removes support for the SSLv2Hello protocol.  Apache Tomcat has explicit =
support for SSLv2Hello; that is, you can enable that, but not enable =
SSLv3. =20

Is there any way to do this in Apache? =20=

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org