<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Does this request not apply to stunnel? I don not recall seeing these as setting within the stunnel configuration file, so this may be an irrelevant question.<br><br><div><hr id="stopSpelling">From: mike_curran@hotmail.com<br>To: stunnel-users@stunnel.org<br>Date: Thu, 7 Aug 2014 12:55:36 -0500<br>Subject: [stunnel-users] SSL Server Allows Anonymous Authentication Vulnerability<br><br>
<style><!--
.ExternalClass .ecxhmmessage P {
padding:0px;
}
.ExternalClass body.ecxhmmessage {
font-size:12pt;
font-family:Calibri;
}
--></style>
<div dir="ltr"><p style="font-family:Arial, Helvetica, sans-serif;font-size:13px;line-height:18px;color:rgb(51, 51, 51);background-color:rgb(255, 255, 255);"><br></p><p style="font-family:Arial, Helvetica, sans-serif;font-size:13px;line-height:18px;color:rgb(51, 51, 51);background-color:rgb(255, 255, 255);">I am looking at this vulnerability reported from McAfee -- but we use stunnel to secure our communications and not the application directly.</p><p style="font-family:Arial, Helvetica, sans-serif;font-size:13px;line-height:18px;color:rgb(51, 51, 51);background-color:rgb(255, 255, 255);"><br></p><p style="font-family:Arial, Helvetica, sans-serif;font-size:13px;line-height:18px;color:rgb(51, 51, 51);background-color:rgb(255, 255, 255);">Are these settings that I can make within the stunnel config -- or something comparable?</p><p style="font-family:Arial, Helvetica, sans-serif;font-size:13px;line-height:18px;color:rgb(51, 51, 51);background-color:rgb(255, 255, 255);"><br></p><p style="font-family:Arial, Helvetica, sans-serif;font-size:13px;line-height:18px;color:rgb(51, 51, 51);background-color:rgb(255, 255, 255);">SSLProtocol -ALL +SSLv3 +TLSv1<br>SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM</p><p style="font-family:Arial, Helvetica, sans-serif;font-size:13px;line-height:18px;color:rgb(51, 51, 51);background-color:rgb(255, 255, 255);"><br></p> </div>
<br>_______________________________________________
stunnel-users mailing list
stunnel-users@stunnel.org
https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users</div> </div></body>
</html>