Tech Tip: Disabling SSLv2 in 4D v11 SQL Release 6
PRODUCT: 4D | VERSION: 11.6 | PLATFORM: Mac & Win
Published On: March 26, 2010
Using the new SET DATABASE PARAMETER with selector 64 (SSL Cipher List) you can now enforce certain levels of SSL as required by the Payment Card Industry (PCI).
A developer can now disable the SSLv2 Ciphers and only allow strong SSLv3 Ciphers to be used when communicating with their server by issuing the following code snippet:
STOP WEB SERVER SET DATABASE PARAMETER (SSL Cipher List;"HIGH:!SSLv2:!EXP:!ADH:!aNULL:!eNULL:!NULL") START WEB SERVER |
According to ServerSniff.net when the above Cipher List is used the available Ciphers Strengths are:
Available SSL2 ciphers:
Available SSL3 ciphers:
AES256-SHA 256 bit
DES-CBC3-SHA 168 bit
AES128-SHA 128 bit
Available TLS1 ciphers:
AES256-SHA 256 bit
DES-CBC3-SHA 168 bit
AES128-SHA 128 bit
See Also: