Re: SSL Cipher Support and V7R1... and so it begins

Brad

This issue is dealing with credit card processing companies. So far

all 3 have been processing credit cards. 1 was able to upgrade to
V7R3 overnight... which was nice. The others are basically dead in
the water.

I don't have experience with this concept, but might it be possible to use
a type of proxy server as a man in the middle? Have the V7R1 box pass the
requests to a server proxy, then have it pass each on to the credit card
company using newer ciphers and return the result back to the V7R1 box?

It might require changing the URLs to use a trusted certificate to the
proxy, who then changes the URL to the credit card company. But I suspect
it would not be hard to code up a middle layer to allow another machine to
perform the actual TLS traffic to the credit card merchant.

Obviously that box would also need to be part of any PCI compliance network
scan. But it strikes me as quicker to implement if the hardware does not
support moving to V7R2+. At least as a stop gap measure.

Doug