Forum Moderators: phranque

Message Too Old, No Replies

weak SSL cipher

         

choyaks

10:27 pm on Aug 13, 2008 (gmt 0)

10+ Year Member



hi everyone,can you help me with this problem, I'm really new to this and I need some idea how to fix this problem.
Could this be configured in .htaccess? if yes, how? please do give some inputs or helpful information/solution I would appreciate it so much.Thanks

Here is the list of weak SSL ciphers supported by the remote server :

Low Strength Ciphers (< 56-bit key)
SSLv2
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export
SSLv3
EXP-DES-CBC-SHA Kx=RSA(512) Au=RSA Enc=DES(40) Mac=SHA1 export
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export
TLSv1
EXP-DES-CBC-SHA Kx=RSA(512) Au=RSA Enc=DES(40) Mac=SHA1 export
EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export
EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export

The fields above are :

{OpenSSL ciphername}
Kx={key exchange}
Au={authentication}
Enc={symmetric encryption method}
Mac={message authentication code}
{export flag}

choyaks

10:28 pm on Aug 21, 2008 (gmt 0)

10+ Year Member



help anybody?

wilderness

3:08 am on Aug 22, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



I've never seen such items discussed here.

a google on mod_rewrite+ssl [google.com]

Another google more fruitful mod_rewrite+ssl+cipher [google.com]