Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
 Post subject: Security
PostPosted: Fri Dec 06, 2013 8:06 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
On this site:
https://www.ssllabs.com/ssltest/index.html

you can test your security weakness about TLS/SSL.

I get a grade B because in this section
Quote:
Cipher Suites (sorted by strength; the server has no preference)
TLS_RSA_WITH_DES_CBC_SHA (0x9) WEAK 56
TLS_DHE_RSA_WITH_DES_CBC_SHA (0x15) DH 1024 bits (p: 128, g: 1, Ys: 128) FS WEAK 56


As you can see I get weak ciher.
How can I disable this cipher?


Top
   
 Post subject: Re: Security
PostPosted: Fri Dec 06, 2013 8:19 pm 
Offline
Senior Member

Joined: Wed May 13, 2009 1:32 pm
Posts: 737
Location: Italy
solved with this in ssl.conf.

Quote:
SSLProtocol -ALL +SSLv3 +TLSv1
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:!MEDIUM:!LOW:!SSLv2:!EXPORT


Top
   
 Post subject: Re: Security
PostPosted: Sat Dec 07, 2013 1:22 pm 
Offline
Senior Member

Joined: Wed Oct 20, 2010 12:35 pm
Posts: 111
Location: United Kingdom
sblantipodi wrote:
solved with this in ssl.conf.

Quote:
SSLProtocol -ALL +SSLv3 +TLSv1
SSLCipherSuite ALL:!ADH:RC4+RSA:+HIGH:!MEDIUM:!LOW:!SSLv2:!EXPORT


I'd ditch SSLv3 entirely and just use TLS 1.0, 1.1 and 1.2.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group