Forum Discussion

swapnil_89332's avatar
swapnil_89332
Icon for Nimbostratus rankNimbostratus
Sep 21, 2015

Need help to set Cipher

Hi   We are running on Ver 10.2.4 and have below cipher string on our SSL profile.   ALL:!SSLv3:!SSLv2:!aDH:!LOW:!EXPORT:!NULL:!MD5:HIGH:MEDIUM:RSA:RC4:@SPEED   We want to disable RC4 and en...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Oct 08, 2015

The best way to test for a given set of ciphers, based on your cipher string, is with the tmm --clientciphers command:

tmm --clientciphers 'ALL:!SSLv3:!RC4:!SSLv2:!aDH:!LOW:!EXPORT:!NULL:!MD5:TLSv1:HIGH:MEDIUM:RSA+AES:@SPEED'

This will dump all of the ciphers that meet the above criteria. I'm pretty sure the above string doesn't produce RC4 ciphers, but I don't have a 10.x box in front of me to test.