SSL Support. Debian 7.7 doesn't support ECDHE?
Just curious if anyone has looked into this before.
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder On
SSLCipherSuite AES256+EECDH:AES256+EDH
SSLCompression off
This server accepts the RC4 cipher, which is weak. Grade capped to B.
Protocols
TLS 1.2 Yes
TLS 1.1 Yes
TLS 1.0 Yes
SSL 3 No
SSL 2 No
Cipher Suites (SSL 3+ suites in server-preferred order; deprecated and SSL 2 suites always at the end)
TLSECDHERSAWITHAES256GCM_SHA384 (0xc030) ECDH 256 bits (eq. 3072 bits RSA) FS 256
TLSECDHERSAWITHAES128GCM_SHA256 (0xc02f) ECDH 256 bits (eq. 3072 bits RSA) FS 128
TLSECDHERSAWITHAES256CBC_SHA384 (0xc028) ECDH 256 bits (eq. 3072 bits RSA) FS 256
TLSECDHERSAWITHAES128CBC_SHA256 (0xc027) ECDH 256 bits (eq. 3072 bits RSA) FS 128
TLSECDHERSAWITHAES256CBC_SHA (0xc014) ECDH 256 bits (eq. 3072 bits RSA) FS 256
TLSECDHERSAWITHAES128CBC_SHA (0xc013) ECDH 256 bits (eq. 3072 bits RSA) FS 128
2 Replies
- Les
openssl ciphers -v 'ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS'
The issue is with the Apache package that I am using.
Thanks!