SSLv3 suport for the agents

[Christian Drouin]

Hi,
During a security audit, the IM agents were flaged because of the SSLv2 and weak encryption.

We need to set the web deamon to accept SSLv3 only.

I tried to modify the file c:\hp\hpsmh\conf\smhpd.conf
But every time I restart the service, the file get overwriten with the old config.

Does anybody know how to fix this problem ?

Thanks.

//Chrys

[Rich Purvis]

You might look at this thread:
http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=958919

It probably answers most of your questions.

-Rich

[Christian Drouin]

Hi Rich,
Thanks for the answer.

So there's no way to change the agent web server to force SSLv3 ? That doesn't seem right ?

I'll try to open a ticket at HP to see if they know a work arround, or else I have to uninstall all of the agents :-(