Forum Discussion
NimbostratusRemoving RCS-SHA
I was looking at RC4 vulnerability and looking at default ciphers below it has RC4-SHA. I was reading in dev central if I do below command this cipher would remove RS=C4. Are there any risk of change from default and remove it if command is correct?
Cipher NATIVE:!MD5:!EXPORT:!DES:!DHE:!EDH:!RC4-SHA:@SPEED Command [cfranklin@LEW3900-LBCore-B:Active:In Sync] ~ tmm --clientciphers 'DEFAULT' ID SUITE BITS PROT METHOD CIPHER MAC KEYX 0: 5 RC4-SHA 128 SSL3 Native RC4
1 Reply
- boneyard
MVP
not sure what you mean with command, is that tmm --clientciphers ? that command only shows which ciphers would be used for a certain cipher string. it doesn't apply anything or such.
if you want to use a specific cipher string then you use it on the ssl profile. the one you show does indeed not use the RC4 one. it does add a whole lot of ciphers compared to the DEFAULT one. some of which you might not want.
if you just want to exclude RC4 you could also do 'DEFAULT:!RC4', in the newer versions this gives quite a safe set.
the risk is that there might be clients that only want to do RC4 and then their connections would fail.
