Re: openssl and weak ciphers



I guess I had this problem earlier. I changed the ssl.conf file as
following:

SSLProtocol all -SSLv2
SSLCipherSuite
ALL:!ADH:!NULL:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:-LOW:+SSLv3:+TLSv1:-SSLv2:+EXP:+eNULL


Hope this helps.



Thanks!

Rohit Khaladkar.





On 12/11/08, Jay Berryman <jay.berryman@xxxxxxxxx> wrote:

I am trying to figure out how to disable weak cipher suites within
openssl and haven't had much luck. Does anyone know how to do this?



Jay Berryman
Systems Engineer
+1 402.963.6347 T

+1 402.963.6051 F
jay.berryman@xxxxxxxxx



Sitel
5601 N 103rd St
Omaha, NE 68132
+1 402.963.6001
www.sitel.com <http://www.sitel.com/>



**CONFIDENTIAL NOTICE**
This e-mail and any files transmitted with it may contain PRIVILEGED or
CONFIDENTIAL information and may be read or used only by the intended
recipient. If you are not the intended recipient of the e-mail or any
of its attachments, please be advised that you have received this e-mail in
error and that any use, dissemination, distribution, forwarding, printing,
or copying of this e-mail or any attached files is strictly prohibited. If
you have received this e-mail in error, please immediately purge it and all
attachments and notify the sender by reply e-mail.
--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subjectunsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list



Relevant Pages

  • Re: openssl and weak ciphers
    ... Rohit khaladkar wrote: ... openssl and haven't had much luck. ... If you are not the intended recipient of the e-mail or any ... attachments and notify the sender by reply e-mail. ...
    (RedHat)
  • Re: System crash
    ... if gdm, gid 42 exists. ... This message, including all attachments, is intended for the ... to its intended recipient, you are hereby notified that any ... distribution or copying of this communication is strictly prohibited. ...
    (RedHat)
  • Re: Commercial router
    ... there was a setting that blocked access ... This message, including all attachments, is intended for the ... have received this communication in error, ... to its intended recipient, you are hereby notified that any dissemination, ...
    (RedHat)
  • Re: Strange Problems/Any way to completely clear out an eTrex Vista?
    ... This email and any attachments may contain confidential material for the ... If you are not the intended recipient, ... Tech support request for eTrex Vista ...
    (sci.geo.satellite-nav)
  • Re: VS: Unzipping problem | write error (disk full?)
    ... the man pages and use the -t flag while extracting as well. ... This message, including all attachments, is intended for the use ... distribution or copying of this communication is strictly prohibited. ... to its intended recipient, you are hereby notified that any dissemination, ...
    (RedHat)