Running Lion 10.7.5, how to disable sslv2 and use only RC4 ciphers to solve vulnerability found in PCI compliance vulnerability scan.

This is what the scan report told me to do. Is this even a problem that can be solved in a browser? I have akamai installed on my mac and they say that may be giving a false problem concerning the sslv2. I have no idea how to change the ciphers used.

ATT says the modem for household use that I have cannot be configured to use the more secure CR4 cipher and disable sslv2 settings. Says I need to get a modem designed for business network use. What a nightmare. All I do is go to a pay gateway website and enter in my customer's credit card numbers, which then is deposited into my bank account. Seems this is the same as any credit card purchase I would make online and that ATT should have security for those transactions covered already. The pay gateway site does use CR4, but the scan has failed me because apparently my modem does not. I am not operating an e-commerce website. (I meant to say false POSITIVE in my question above, not false problem.)

Similar Messages

How to disable SSLv3 and keep only TLS for LDAP connection.

Hi,
I'm planning to keep only TLSv1.2 for LDAP connections.
I tried to set LDAP_OPT_SSL_INFO in LDAP Session Options using a SecPkgContext_ConnectionInfo Structure with dwProtocol SP_PROT_TLS1_2_CLIENT(as described here - https://social.msdn.microsoft.com/Forums/en-US/7544226d-97e1-4dae-a377-e382c2281e91/how-to-set-up-tls-in-ldap-connection?forum=vcgeneral),
but it returns LDAP_PARAM_ERROR.
I tried to call this function directly after ldap_sslinit/ldap_init and before ldap_connect() - without success, I tried to use other parameters with default values, I tried to initialize them by 0/other possible values - and also no success.
How I can do this?
Thanks for your advices.

LDAP_PARAM_ERROR
https://msdn.microsoft.com/en-us/library/aa367026(v=vs.85).aspx

Would like to disable HTTP and use only HTTPS yet I get side effects

Hello,
I have established a secure connection between the AS ABAP and AS Java.
I would like assure that all communication between the servers is using https and for that, as a test, I have deactivated the http service using SMICM transaction.
The only side effect I could recognize so far is that the Web Dynpro for ABAP stuff doesn't work through transaction SE80, the working area simply doesn't come up. If I activate HTTP again it is working.
Am I doing the right thing by disabling HTTP completely and if yes, what else do I need to do in order to prevent this side effect from happening?
Roy

humuhumunukunukuapuaa wrote:
If I get some nice approvals on my app spree in 10 days, I would like to close Talbots and Abercrombie and Fitch store cards. Total CL for the 2 is $2,700 ($1,350 each) but I can make up for that closure and utilization loss by getting quite a bit more than those amounts on majors during my app spree. Talbots has only been open 4 months, A&F one year. I have other cards that are the same age or older so should not majorly affect AaoA. Thoughts? I know some will say don't close cards, but they're store cards and I don't need to be responsible for store cards I don't use.If you have no use for them and don't foresee using them in the future then you should probably close them out. They won't affect your AAoA as the cards will stay in your reports for 10 years. No sense in keeping cards that you don't want just to take up room in your sock drawer.

Apple - please announce some guidance as to when devices running Lion 10.7.2 will automatically update Pages (and other iWork) docs via iCloud so that they appear updated in iOS5 devices?

Apple - please announce some guidance as to when devices running Lion 10.7.2 will automatically update Pages (and other iWork) docs via iCloud so that they appear updated in iOS5 devices?

Same problem here after update to 10.7.3 and I need to manually set the wireless. If I disable wireless and reable it again the wireless connects ok

How to disable 'display pdf (using Acrobat Pro X) in browser'? Note: The option is unavailable to un-check box.

How to disable 'display pdf (using Acrobat Pro X) in browser'? Note: The option is unavailable to un-check box.

Hi URT301,
Please see this document: PDF Ownership when Reader X is Installed with Acrobat. You'll find several solutions to this problem in the FAQ section.
Please let us know how it goes.
Best,
Sara

SharePoint 2013 How to disable Drag and Drop Functionality

Hi,
In SharePoint 2013 in document library we have default behavior of drag and drop documents in document library. How to disable drag and drop documents in document library?

Hi,
As a work around, you can edit the Drag and Drop js as to remove the drag and drop functionality, edit the document library page (default
page) place the content editor web part on top of the library include the modified Drag and Drop js file in the content editor web part, Please save the Drag and Drop js file to other location (probably Site Assets library etc).
Hope it helps!!!
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. Thanks, Ajeet

How to Disable SSLv2 in Oracle IAS 10.1.3

How to disable SSLV2 in Oracle IAS 10.1.3.. I added below in ssl.conf file.. But it is not working...
SSLProtocol -ALL SSLv3 TLSv1
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
Thanks
Lalitha

How can you have WebCache if you are using 10.1.3 version?
The cause of this problem has been identified and verified in an unpublished Bug 4761833 : "IE FAILS TO TO CONNECT TO WEBCACHE VIA SSL IF SSLV2.0 IS NOT SELECTED".
By default Webcache sets its SSL_ENABLED parameter in webcache.xml to: SSLV3_V2H
This supports only SSL V2.0 and SSLV3.0 and not TLSV1.0
When IE makes a connection with: SSL V2.0, SSLV3.0, TLSV1.0 all checked, an Ethereal sniff shows:
SSLV2 Client Hello
SSLV3 Server Hello
When IE makes a connection with: SSLV3.0, TLSV1.0 checked, SSL v2.0 unchecked, an Ethereal sniff shows:
TLSV1 Client Hello
SSLV3 Alert (Level: Fatal, Description: Unexpected Message)
When Firefox makes a connection with SSLV3.0, TLSV1.0 checked, SSL v2.0 unchecked an Ethereal
sniff shows:
SSLV2 Client Hello
SSLV3 Server Hello
So even though SSLV2.0 is unchecked it still makes the initial Client Hello via SSLV2.0 hence why Mozilla works
The reason why IE fails when SSLV2.0 is unchecked is because IE always uses what it considers to be the best Protocol and picks TLSV1.0, and as the default SSL_ENABLED parameter in Webcache does not support TLS V1.0, then it fails.
Solution
To implement the solution, execute the following steps:
1. Edit the $ORACLE_HOME/webcache/webcache.xml
For the SSL Listen entry e.g:
<LISTEN IPADDR="ANY" PORT="443" SSLENABLED="SSLV3_V2H" PORTTYPE="NORM">
Change:
"SSLV3_V2H"
to
"SSL"
2. Save the file and restart webcache, and then test you can access Webcache via SSL with SSLV2.0 unchecked
Hope this helps
Regards.

How to disable SSLv3 and RC4 on Lync Server Access Edge?

We use Lync Server 2013.
How to disable SSLv3 and RC4 on Lync Server Access Edge?
This solution https://technet.microsoft.com/en-us/library/security/3009008.aspx doesn't work

Hi dizen,
To completely disable RC4, you can create the following registry key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128]
"Enabled"=dword:00000000
For more details, please check out this KB.
http://support.microsoft.com/kb/2868725
Best regards,
Eric

How to disable the security code and use only the Touch ID

how to disable the security code and use only the Touch ID

You can't use Touch ID without a passcode.
http://support.apple.com/kb/HT5883

How to disable listenPort? (SSL only)

Hi,
          how can I disable listenPort and enable only SSLListenPort?
          Thanks.


There is no way to do this in WLS 5.1. You can use firewalls to prevent access to
          this port...
          Darrel Cox wrote:
          > Did you ever get an answer to this question? If so, what was it? And can it be
          > done without bringing down the instance?
          >
          > Darrel
          >
          > Papaya Head <[email protected]> wrote:
          > >in wls5.1... thanks.
          > >
          > >Papaya Head wrote:
          > >
          > >> Hi,
          > >>
          > >> how can I disable listenPort and enable only SSLListenPort?
          > >>
          > >> Thanks.
          > >

I have a MB Pro that is running Lion; I also have two external DVI monitors and a DVI splitter in hopes that I could run the two monitors with my MB Pro. This actually works fine, but I am unable to "extend" the desktop. Any insights?

I have a MB Pro that is running Lion; I also have two external DVI monitors and a DVI splitter in hopes that I could run the two monitors with my MB Pro. This actually works fine, but I am unable to "extend" the desktop. Any insights?

You cannot have a extended desktop using a splitter. All that does is mirror the pair attached to the splitter.
You can do this however using a Matrox DualHead2Go.
Other solution would be to attach one monitor to your video out as you do the splitter and attach the other via USB (assuming the adapter supports the monitor's resolution).
Newer Technology USB to DVI / HDMI / VGA HD Video Display Adapter

I have moved from a G5 Powermac to an Intel Mac Pro and am porting over Items from a Backup HDD. How can I access and use drawings and documents created on the PC computer on the Intel computer ?

I have moved from a G5 Powermac to an Intel Mac Pro and selectively porting over items from a backup hard drive.
How can I access and use documents and drawings created on the PC based computer ?

Clarisworks, you need Appleworks, which will only work with Mac OS X10.6.8 or earlier. See this tip if you must go newer. Mac Pros with newer hardware configuration than July 20, 2011 can't use Mac OS X 10.6.8 or earlier without this tip and then it would be Mac OS X Server. I'm not sure if the new black Mac Pro supports that configuration or not.
iPhoto, there is an iPhoto for all versions of Mac OS X.
iTunes, there is an iTunes for all versions of Mac OS X. Note with iTunes versions 11 and later, which are needed for syncing with iOS 7 or or later, you will lose coverflow, if you liked that feature. Sadly you can't run an older version of iTunes from within Mac OS X 10.9 or later.
Sketchup: http://help.sketchup.com/en/article/60107 shows the versions that will work with intermediate Mac OS X versions, and this shows the latest version: http://help.sketchup.com/en/article/36208 be sure to click on the operating system you choose to use.
GIF - Viewing GIFs Apple's Preview can do that. Editing them, I like http://www.lemkesoft.com/ Graphicconverter.
DMG is able to be opened by all versions of Mac OS X. This are just "disk images" which store programs on a virtual disk that will open when double clicked. Frequently you'll find the installer of the said program inside. To find out if the program itself is compatible with 10.7 through 10.9, see http://www.roaringapps.com/
Otherwise see the resources on:
https://discussions.apple.com/docs/DOC-2455
If you end up deciding to stick with Snow Leopard.

Re: How do you create and use "common" type classes?

Hi,
You have 2 potential solutions in your case :
1- Sub-class TextNullable class of Framework and add your methods in the
sub-class.
This is the way Domain class work. Only Nullable classes are sub-classable.
This is usefull for Data Dictionary.
The code will be located in any partition that uses or references the supplier
plan.
2- Put your add on code on a specific class and instanciate it in your user
classes (client or server).
You could also use interface for a better conception if needed. The code will
also be in any partition that uses or references the supplier plan where your
add on class is located.
If you don't want that code to be on each partition, you could use libraries :
configure as library the utility plan where is your add-on class.
You can find an example of the second case (using a QuickSort class,
GenericArray add-on) with the "QuickSort & List" sample on my personal site
http://perso.club-internet.fr/dnguyen/
Hope this helps,
Daniel Nguyen
Freelance Forte Consultant
http://perso.club-internet.fr/dnguyen/
Robinson, Richard a écrit:
I'm relatively new to forte and I'd like to know how can you handle utility
type classes that you want to use through out your application? Ideally
what I want is a static class with static methods.
Let's say that I have a StringUtil class that has a bunch of methods for
manipulating strings.
My problem is that we have code that runs on the client and code that runs
on the server. Both areas could use the StringUtil class, but from what I
understand, I have to create StringUtil in a plan and then create a server
object of type StringUtil. The server object will eventually get assigned
to a partition. That's not good since I really want the server object to
physically reside at the server end and at the client end. (Actually, I
don't want a server object, I just want to invoke a static method of a
static class).
Any clues on how to solve this problem would be appreciated.
Also, what is the url at Sage-it that has a summary of all emails that have
been posted to [email protected]? Perhaps this question has been
answered previously.
Thanks in advance
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>-
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

Hi Richard,
Your question about "utility classes" brings up a number of issues, all of
which are important to long-term success with Forte.
There is no such thing as a static method (method that is associated with a
class but without an implicit object reference - this/self/me "pointer") in
TOOL, nor is there such thing as a global method (method not associated
with a class at all). This is in contrast to C++, which has both, and
Java, which has static methods, but not global classes. Frequently, Forte
developers will write code like this:
result, num : double;
// get initial value for num....
tmpDoubleData : DoubleData = new;
tmpDoubleData.DoubleValue = num;
result = tmpDoubleData.Sqrt().DoubleValue;
tmpDoubleData = NIL; // send a hint to the garbage collector
in places where a C++ programmer would write:
double result, num;
// get initial value for num....
result = Math::Sqrt(num);
or a Java programmer would write:
double result, num;
// get initial value for num....
result = Math.sqrt(num);
The result of this is that you end up allocating an extra object now and
then. In practice, this is not a big deal memory-wise. If you have a
server that is getting a lot of hits, or if you are doing some intense
processing, then you could pre-allocate and reuse the data object. Note
that optimization has its own issues, so you should start by allocating
only when you need the object.
If you are looking for a StringUtil class, then you will want to use an
instance of TextData or TextNullable. If you are looking to add methods,
you could subclass from TextNullable, and add methods. Note that you will
still have to instantiate an object and call methods on that object.
The next issue you raise is where the object resides. As long as you do
not have an anchored object, you will always have a copy of an object on a
partition. If you do not pass the object in a call to another partition,
the object never leaves. If you pass the object to another partition, then
the other partition will have its own copy of the object. This means that
the client and the server will have their own copies, which is the effect
you are looking for.
Some developers new to Forte will try to get around the lack of global
methods in TOOL by creating a user-visible service object and then calling
methods on it. If you have a general utility, like string handling, this
is a bad idea, since a service object can reside only on a single
partition.
Summary:
* You may find everything you want in TextData.
* Unless you anchor the object, the instance will reside where you
intuitively expect it.
* To patch over the lack of static methods in TOOL, simply allocate an
instance when required.
Feel free to email me if you have more questions on this.
At the bottom of each message that goes through the mailing list server,
the address for the list archive is printed:
http://pinehurst.sageit.com/listarchive/.
Good Luck,
CSB
-----Original Message-----
From: Robinson, Richard
Sent: Tuesday, March 02, 1999 5:44 PM
To: '[email protected]'
Subject: How do you create and use "common" type classes?
I'm relatively new to forte and I'd like to know how can you handle utility
type classes that you want to use through out your application? Ideally
what I want is a static class with static methods.
Let's say that I have a StringUtil class that has a bunch of methods for
manipulating strings.
My problem is that we have code that runs on the client and code that runs
on the server. Both areas could use the StringUtil class, but from what I
understand, I have to create StringUtil in a plan and then create a server
object of type StringUtil. The server object will eventually get assigned
to a partition. That's not good since I really want the server object to
physically reside at the server end and at the client end. (Actually, I
don't want a server object, I just want to invoke a static method of a
static class).
Any clues on how to solve this problem would be appreciated.
Also, what is the url at Sage-it that has a summary of all emails that have
been posted to [email protected]? Perhaps this question has been
answered previously.
Thanks in advance

How do I open and use Photoshop Elements 12?

How Do I Open and use Photoshop Elements 12? I've just purchased it and can't find a way to open and use the program.
[email protected]

Mac or Windows?
Have you actually installed it, or just downloaded your purchased copy? If just downloaded then you need to double-click the downloaded file from wherever you saved it to. This will run the installer and ask you to enter your serial number (which you should NEVER post in a public forum such as this).
If you have installed it, and if you're using Windows, it should have placed shortcuts on the desktop. But if not click Start and type 'photo' without the quotes and you should see an entry for PSE.
Cheers,
Neale
Insanity is hereditary, you get it from your children
If this post or another user's post resolves the original issue, please mark the posts as correct and/or helpful accordingly. This helps other users with similar trouble get answers to their questions quicker. Thanks.

How do I download and use Tango

How do I download and use Tango? I was able to download it but i cannot click on it to use. I want to use it to video chat with my friend who has the iphone.

If you have Lion installed, v10.7, use FaceTime instead available from the App Store on your Mac.
According to iTunes the requirements for Tango are for iOS devices only.
Where did you download the Tango file from and which Mac OS X do you have installed ???

Running Lion 10.7.5, how to disable sslv2 and use only RC4 ciphers to solve vulnerability found in PCI compliance vulnerability scan.

Similar Messages

Maybe you are looking for