We have SSLv3 disabled in DataPower. I ran sslscan
to check what all cipher suites can be used currently during SSL handshake.
In the sslscan output, I have found out that below cipher suites are being accepted.
TLSv1 256 bits AES256-SHA
TLSv1 128 bits AES128-SHA
TLSv1 168 bits DES-CBC3-SHA
TLSv1 128 bits RC4-SHA
Preferred Server Cipher: TLSv1 256 bits AES256-SHA
I then, disabled TLS1.0 on DataPower (server) and ran the sslscan
again. The result was not what I was expecting.
All the ciphersuites including the ones which were accepted during handshake over TLS1.0 are being rejected.
How would I come to know, which cipher suits my server will accept if I disable TLS1.0?