KNOWLEDGE BASE
Log In    |    Knowledge Base    |    4D Home
Tech Tip: Disabling SSLv2 in 4D v11 SQL Release 6
PRODUCT: 4D | VERSION: 11.6 | PLATFORM: Mac & Win
Published On: March 26, 2010

Using the new SET DATABASE PARAMETER with selector 64 (SSL Cipher List) you can now enforce certain levels of SSL as required by the Payment Card Industry (PCI).

A developer can now disable the SSLv2 Ciphers and only allow strong SSLv3 Ciphers to be used when communicating with their server by issuing the following code snippet:

STOP WEB SERVER
SET DATABASE PARAMETER (SSL Cipher List;"HIGH:!SSLv2:!EXP:!ADH:!aNULL:!eNULL:!NULL")
START WEB SERVER


According to ServerSniff.net when the above Cipher List is used the available Ciphers Strengths are:

Available SSL2 ciphers:	

Available SSL3 ciphers:
AES256-SHA 256 bit
DES-CBC3-SHA 168 bit
AES128-SHA 128 bit

Available TLS1 ciphers:
AES256-SHA 256 bit
DES-CBC3-SHA 168 bit
AES128-SHA 128 bit

See Also: