<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><p style="margin-bottom: 0.7em; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; color: rgb(51, 51, 51); background-color: rgb(255, 255, 255);"><br></p><p style="margin-bottom: 0.7em; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; color: rgb(51, 51, 51); background-color: rgb(255, 255, 255);">I am looking at this vulnerability reported from McAfee -- but we use stunnel to secure our communications and not the application directly.</p><p style="margin-bottom: 0.7em; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; color: rgb(51, 51, 51); background-color: rgb(255, 255, 255);"><br></p><p style="margin-bottom: 0.7em; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; color: rgb(51, 51, 51); background-color: rgb(255, 255, 255);">Are these settings that I can make within the stunnel config -- or something comparable?</p><p style="margin-bottom: 0.7em; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; color: rgb(51, 51, 51); background-color: rgb(255, 255, 255);"><br></p><p style="margin-bottom: 0.7em; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; color: rgb(51, 51, 51); background-color: rgb(255, 255, 255);">SSLProtocol -ALL +SSLv3 +TLSv1<br>SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM</p><p style="margin-bottom: 0.7em; font-family: Arial, Helvetica, sans-serif; font-size: 13px; line-height: 18px; color: rgb(51, 51, 51); background-color: rgb(255, 255, 255);"><br></p> </div></body>
</html>