https://bugzilla.novell.com/show_bug.cgi?id=693479 https://bugzilla.novell.com/show_bug.cgi?id=693479#c1 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #1 from Ludwig Nussel 2011-05-13 10:19:18 CEST --- Yes. The next openSUSE will come with a better default config. https://build.opensuse.org/request/show/66521 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=693479 https://bugzilla.novell.com/show_bug.cgi?id=693479#c3 --- Comment #3 from Adrian Dimcev 2011-05-13 12:27:50 UTC --- "Suse Linux Enterprise Server 11 SP1 fails to ship a proper SSL/TLS sample configuration." -> in the context of "The results are somehow mixed." -> where results = "Specifically basic settings were verified, nothing really advanced; the SSL/TLS protocols enabled by default(SSL 2.0 to be disabled as per RFC 6176), cipher suites enabled by default(if any weak or export ciphers suites are enabled), secure renegotiation patch support and the underlying OpenSSL version shipped with the OS." "Did not encounter major issues either in quickly have a default SSL site up and running on Suse Linux Enterprise Server 11 SP1." -> a few words mentioning that for the test's needed functionality(have a default HTTPS web site up and running, point the scanner against it and obtain the results) no issues were encountered and the setup was easy. So basically it's easy to have a default HTTPS web site up and running but in terms of SSL protocol version and cipher suites support the default configuration is inappropriate. Thanks, Adrian -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=693479 https://bugzilla.novell.com/show_bug.cgi?id=693479#c5 --- Comment #5 from Adrian Dimcev 2011-05-13 13:03:27 UTC --- Sorry for the confusion, I've change that blog entry line to: "Suse Linux Enterprise Server 11 SP1 fails to ship a proper SSL/TLS sample configuration in terms of SSL protocol cipher suites support(SSL 2.0 was enabled, as well as weak/export cipher suites)." If it's still misleading please let me know. Thanks, Adrian -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=693479 https://bugzilla.novell.com/show_bug.cgi?id=693479#c7 Roman Drahtmueller changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |draht@novell.com --- Comment #7 from Roman Drahtmueller 2011-06-28 03:12:31 UTC --- dupe to bnc#688472; for reference: package submitted with corresponding fix also to SLE11-SP1,2 in cumulative update with libapr1 and libapr-util1. Dear security-team, please reassign to maint-coord@suse.de if applicable to coordinate the cumulative update. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.