Mantis - Resin
Viewing Issue Advanced Details
6335 minor always 04-03-20 03:31 04-03-20 03:31
nam  
 
normal  
new 4.0.64  
open  
none    
none  
0006335: add SSL documentation example for disabling DES and RC4 ciphers
(rep by S. Chong)

DES suffers from SWEET32:
    SSL Medium Strength Cipher Suites Supported (SWEET32)

RC4 suffers from Bar Mitzvah:
    SSL RC4 Cipher Suites Supported (Bar Mitzvah)

Need documentation on how to disable them on JSSE and maybe OpenSSL (which should have them already disabled by default for newer versions).

There are no notes attached to this issue.