Collaborate Disseminate
I have to get rid of so called "weak security" in a Tomcat application.
A penetration test identified services that accept connections with insecure TLS encryption and hashing algorithms: TLS 1.0/1.1,SHA1,CBC
Without being a Tomc… Continue reading Disabling weak cipher suites in Tomcat does not work as expected
I’m trying to setup a custom order of TLS cipher suites according to this Microsoft list, on Windows Server 2022 but the outcome is not the one that I was expecting.
After using the powershell to disable a bunch, and set a preferred order… Continue reading Cipher Suites settings wrong order?
There is a server (app) that uses OpenSSL to allow clients establish secure connection.
The certificate info for server public key is:
Certificate:
Data:
Version: 1 (0x0)
Serial Number: 1 (0x1)
Signature Algorit… Continue reading How server key limits protocols and ciphers used? [duplicate]
I am trying to learn about cipher lists and how to order them. I am new to this. I have gone through this doc. I don’t get some of the things mentioned in it. Maybe this post can clairfy it.
I want to create a cipher list that doesn’t cont… Continue reading How to create a cipher string that doesn’t contain AES and CAMELLIA ciphers?
I need to know the key exchange of the DHE-DSS cipher suites, will it be the same as mentioned in DHE-RSA?
Continue reading Need to know the key exchange value of the following cipher suites [migrated]
I need to know the key exchange of the DHE-DSS cipher suites, will it be the same as mentioned in DHE-RSA?
Continue reading Need to know the key exchange value of the following cipher suites [migrated]
Forgive my inexperience with encryption, I’ve been researching this for the better part of the morning and still cannot find a smoking gun answer.
A vendor is requesting that we verify a website we utilize is secured using a specific ciphe… Continue reading P-384 vs. SHA384
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA supports forward secrecy but it doesn’t use GCM mode and use SHA1 TLS_RSA_WITH_AES_256_GCM_SHA384 uses GCM mode and SHA2 but it doesn’t support forward secrecy. Which one is more secure?
My test tool uses java and I need it to use TLS_DHE_RSA_WITH_AES_128_CCM.
Does standard java (Oracle) support CCM cipher suites?
I am seeing oracle links mentioning CCM but am not able to make it work.
Will any policy or setting change mak… Continue reading Java support for TLS_DHE_RSA_WITH_AES_128_CCM
I have a postfix mail server that accepts these cipher suites:
tls_high_cipherlist=ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:
ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:
ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RS… Continue reading Cipher suite choice on macOS on Apple Silicon