Shibboleth Developers

[Ian Young <>]

Nate Klingenstein wrote:

> I've yanked SSLv2 from and added !EXPORT40 to the example configuration.

Removing the +SSLv2 from the spec doesn't (I think) remove support for
SSLv2, in fact.  You'd need to do something like !SSLv2 for that.

+SSLv2 is wackily defined to suck SSLv2 ciphers to that point in the
precedence list.  I think.  As usual with OpenSSL, the documentation
isn't the easiest thing to get my head round.

        -- Ian