Questions tagged [cipher]

The tag has no usage guidance.

20 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
221 views

Apache TrafficServer as reverse proxy gives empty cipher list

I am trying to setup Apache Trafficserver as a reverse proxy. (Debian Stretch, ATS 7.0.0 (also tried 7.1.2 from backports), openssl 1.1.0f) Everything went fine so far, until I came accross ...
1
vote
0answers
51 views

Missing openssl cipher-algorithms on specific VMs/Hoster

I'm trying to use AES-128-CBC-HMAC-SHA256 but this cipher-algorithm isn't available on a VM on a specific hosting provider. The OS, installed packages, Kernel, openssl version, and the like are the ...
1
vote
1answer
27 views

SSLCipherSuite - more precise definition, need only strong ciphers

The Apache documentation of SSLCipherSuite seems a little vague and the examples I found on the web make it much worse. I see a lot of references to "all", long lists of specific ciphers and lots of "...
1
vote
1answer
1k views

Postfix 2.6.6 with TLS - unable to receive emails from GMail (and a couple of other MTAs) but others are OK, why?

I've just had to look at a CentOS 6 server running Postfix 2.6.6 which was able to send emails to everyone, but could not receive them from GMail (and a few other MTAs) due to incoming TLS negotiation ...
1
vote
0answers
353 views

Troubleshooting Cipher handshake issue

All right, so I have work with our networking engineers and it just appears that nobody is able to figure this issue out and so I'm all out of options as I have attempted to Google research this issue ...
1
vote
0answers
249 views

Configure VPN ciphers on Mac OS Server

I'm trying to harden the L2TP/IPSec VPN on an El Capitan server. All the resources I can find either just walk you through the basic setup (adding a shared key, etc.) or are for third-party servers. ...
1
vote
0answers
76 views

What is the correct way to secure a user directory with EFS not in a domain network?

Logged in as an administrator on a Windows 10 machine. cipher /E /A /S:C:\Users\MYUSER or cipher /E C:\Users\MYUSER I've read and been told that the bottom one is the correct way. End result: ...
1
vote
0answers
1k views

Scan Ciphers on FTPS port

I'm trying to remove RC4 ciphers per BEAST, but I'm having trouble verifying that there are ciphers available on my FTPS ports. NMAP returns the cert on the port, but doesn't say anything about the ...
0
votes
0answers
42 views

Filtering cipher suites and certificate algorithms without man-in-the-middle

I've set up a firewall and proxy with pf & Squid on FreeBSD. Is it possible to observe and filter with squid which cipher suite is selected between end points (client and server) without changing ...
0
votes
0answers
33 views

Freeradius ECDSA OpenSSL Configuration

I am trying to use ECDSA cipher suites with my EAP-TLS radius controller, but I have two problems: the server answers fall always in a no common cipher suites; the client certificate is installed on ...
0
votes
0answers
34 views

Freeradius 3.0 ECDSA Ciphersuite

I need to perform EAP-TLS by TLS 1.2, 1.1 or 1.0 using these set of cipher suites: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 ...
0
votes
0answers
19 views

ServerHello selecting unavailable cipher suite

I am migrating a legacy Java application from OracleJDK to OpenJDK (Redhat distribution). This application makes a connection to the RabbitMQ server using the client certificate. The TLS connection (...
0
votes
1answer
36 views

ADFS stop working

So I tried to secure our domain controllers with a narrowed list of Ciphers and now the Office 365 ADFS is broken for Chrome and Firefox. I need some help trying to figure out how to put it back. I ...
0
votes
0answers
423 views

Log Client Ciphersuite in HAProxy

We know of log configurations that can log negotiated cipher-suite info in successful connections. But what we need to do is to log the client cipher-suite info that HAProxy gets hold of during TLS ...
0
votes
1answer
586 views

How to handle cipher suite mismatch between two servers

I have an IIS website running on two servers. One server is Windows Server 2016, the other Windows Server 2012. Under certain circumstances these two servers need to talk to each other. The ...
0
votes
1answer
271 views

Best practice: Wowza SSL Configuration

Screenshot: Server with Wowza running using a SSL certificate with basis configuration I get this result from the SSLLabs with the default configuration (see screenshot). The only places I can change ...
0
votes
1answer
237 views

JBoss SSLHonorCipherOrder Unexpected Attribute

We have recently moved to HTTPS and we are using Jboss 7.1.0 AS. We have the following standalone.xml configuration at our end. <subsystem xmlns="urn:jboss:domain:web:1.1" native="false" default-...
0
votes
1answer
94 views

SSL S2S communication, protocol and ciphers

about a server/server S2S communication: 1st server has on Apache .conf: SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-...
0
votes
0answers
52 views

What might have installed 2 new DH ciphers in SChannel?

Half of my users' IE 11.0.9600 browsers suddenly stopped connecting to my older WebLogic (Java) servers. After some digging around, all the users presently unable to connect to these older WL servers ...
-1
votes
1answer
134 views

How to support more HTTPS Ciphers?

I am debugging an IoT device that I am making. I am having it try and connect to my website (EC2 hosted) over HTTPS. The device is running into an issue negotiating the TLS handshake, and it is ...