delegateでSSL3を使用できなくする
http://d.hatena.ne.jp/iww/20141231/sslway
確認手段
(1)
wget --no-check-certificate --secure-protocol=SSLv3 https://web-server/dir01/
wget --no-check-certificate --secure-protocol=TLSv1 https://web-server/dir01/
(2)
openssl s_client -connect web-server:443 -ssl3
openssl s_client -connect web-server:443 -tls1
No comments:
Post a Comment