AnsweredAssumed Answered

sslv3 / poodle

Question asked by mcalvi on Nov 5, 2014
Latest reply on Nov 6, 2014 by mcalvi

Hi,

Can someone explain how the ssllabs scanner tests for sslv3?  It shows our server as not supporting SSLv3 but i can connect to it via 'openssl s_client -ssl3 -connect domain:port' and the qualys QID 38116 shows it as still enabled:

SSLv3   COMPRESSION METHOD  None
DES-CBC3-SHARSA RSA SHA13DES(168)   HIGH
AES128-SHA  RSA RSA SHA1AES(128)    MEDIUM
AES256-SHA  RSA RSA SHA1AES(256)    HIGH

TLSv1 PROTOCOL IS ENABLED

 

FF with SSLv3 only does not connect.

 

any thoughts?

Outcomes