Forum Discussion
refra_151287
Cirrus
CirrusSSL: Restrict Key Exchange Length
Hi,
any idea how to restrict Key exchange protocols that are based on DHE or RSA protocols with keys not less than 2048-bits in length?
ekaleidoCirrus
CirrusThe Cipher string in your SSL profile. You'll have to change the dropdown to "Advanced" to see it, and it is set to "DEFAULT" unless you modify it. You can get the cipher suites available in DEFAULT with the following command:
tmm --clientciphers 'DEFAULT'
Fro there you can include or exclude whatever you want.