|
Viewing Issue Advanced Details
[ Jump to Notes ]
|
[ View Simple ]
[ Issue History ]
[ Print ]
|
|
ID |
Category |
Severity |
Reproducibility |
Date Submitted |
Last Update |
|
0006335 |
[Resin] |
minor |
always |
04-03-20 03:31 |
04-03-20 03:31 |
|
|
Reporter |
nam |
View Status |
public |
|
|
Assigned To |
|
|
Priority |
normal |
Resolution |
open |
Platform |
|
|
Status |
new |
|
OS |
|
|
Projection |
none |
|
OS Version |
|
|
ETA |
none |
Fixed in Version |
|
Product Version |
4.0.64 |
| |
Product Build |
|
|
|
Summary |
0006335: add SSL documentation example for disabling DES and RC4 ciphers |
|
Description |
(rep by S. Chong)
DES suffers from SWEET32:
SSL Medium Strength Cipher Suites Supported (SWEET32)
RC4 suffers from Bar Mitzvah:
SSL RC4 Cipher Suites Supported (Bar Mitzvah)
Need documentation on how to disable them on JSSE and maybe OpenSSL (which should have them already disabled by default for newer versions). |
|
Steps To Reproduce |
|
|
Additional Information |
|
|
|
Attached Files |
|
|
|
Relationships 
