For PCI compliance I was required to protect our server against BEAST attacks. While I have correctly configured the apache / openssl settings to pass a scan, these settings have effectively limited the client browsers that can securely transact on the sites https side.
We are using Centos 6.5 Final, OpenSSL 1.0.1e-fips 11 Feb 2013
I cannot find any information on how to update or add either specific or all ciphers to OpenSSL.
Question 1: Are cipher suites distributed within the OpenSSL program OR are ciphers suites add-ons?, if they are add-ons how do you update them?
Question 2: How do you manually update to the latest OpenSSL version? Currently openssl-1.0.1i ? (CentOS states it is already the latest - which it is not.)