Regresar
-
Título
Need syntax for Supported Ciphers to disable exclude 3DES. Have ALL:!RC4 -
Descripción
Need syntax for Supported Ciphers to disable exclude 3DES. Have ALL:!RC4 -
Causa
Able to disable on the OS side but scans report that VDS will still allow 3DES. Need to add 3DES to the exclusion. -
Resolución
This is configured in the Listener Configuration, Security tab (SSL Authentication Type). The Supported Ciphers field should be updated the example below. That is a colon separated list so the format should be:
ALL:!RC4:!3DES
to exclude both RC4 and 3DES.
The option is an openssl cipher list. According to the man page
https://www.openssl.org/docs/manmaster/man1/openssl-ciphers.html