Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [cipher]

68 questions
0
votes
0 answers

Are there any Operating Systems or Browsers that still depend on having these Ciphers enabled?

Doing a litle Cryptography Research and hit a case of conflicting data so wanted to try here. I'm running a Web Service and currently support these 2 Ciphers: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0X9F) DH 4096 BITS FS…
Adamski2505
  • 1
  • 3
0
votes
0 answers

Apache SSLCipherSuite directive in letsencrypt ignored

I have a web application using Apache 2.4 that runs an external API. Recently a client had trouble connecting to our system due to an SSL handshake failure. They went on ssllabs and found that our server supports the following cipher suite for TLS…
Alex
  • 221
  • 2
  • 8
0
votes
0 answers

How can I use this same Cipher suite on Dovecot?

I have the following cipher suite on Apache: #TLSv1.3 SSLCipherSuite TLSv1.3 TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 #TLSv1.2 SSLCipherSuite…
user549144
0
votes
0 answers

Cipher names (ipsec)

I've got this in my syslog 470 Nov 22 11:32:23 mini31 ipsec[8820]: 13[IKE] 192.168.1.7 is initiating a Main Mode IKE_SA 471 Nov 22 11:32:23 mini31 ipsec[8820]: 13[CFG] received proposals: IKE:AES_CBC_256/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_1024,…
Richard Barraclough
  • 101
  • 6
0
votes
2 answers

Need help for TLS1.2 Cipher disabling in RHEL satellite server version - 6.5.2

We need to disable TLS_RSA_WITH_AES_256_GCM_SHA384 running on port 8008 and 9090 . Below processes are running on ports 8008 and 9090 respectively - ruby /usr/bin/smart_proxy_dynflow_core -d -p…
Biswajit
  • 1
  • 1
-1
votes
1 answer

How to support more HTTPS Ciphers?

I am debugging an IoT device that I am making. I am having it try and connect to my website (EC2 hosted) over HTTPS. The device is running into an issue negotiating the TLS handshake, and it is throwing a Handshake Failure (40). The IoT device…
Reid
  • 411
  • 6
  • 17
-1
votes
1 answer

Should I configure Ciphersuites on openssl after setting MinProtocol and CipherString?

Current OpenSSL version OpenSSL 1.1.1d 10 Sep 2019 (Library: OpenSSL 1.1.1g 21 Apr 2020) Current openssl.cnf configuration At the top of the file openssl_conf = default_conf At the bottom of the file [default_conf] ssl_conf =…
Elvex
  • 217
  • 2
  • 9
-2
votes
1 answer

Will Disabling All Non-256-bit Cipher Suites Cause An Issue?

I want to disable some risky cipher suites (especially for TLS 1.1 and 1.0) which are 128-bit, in order to achieve a more secure server in Windows. But these cipher suites may be used by some client. They probably use a 256 bit version of some…
Sahin
  • 119
  • 1
  • 5
1 2 3 4
5