Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
OpenSSL 'ChangeCipherSpec' MiTM Potential Vulnerability
#9
(12-22-2020, 07:46 PM)kudzu Wrote: I have forwarded him this forum link to follow up.

As you advised I done the Cipher list and this got resolved in this quarter PT. Thank you very much.

Code:
TInServerIOHandlerSSLOpenSSL(IOHandler).SSLOptions.CipherList :='ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:' +
'DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:' +
'ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:!ADH:!EXP:!RC4:!eNULL@STRENGTH';

Now getting the vulnerability 'SSL 64-bit Block Size Cipher Suites Supported (SWEET32)'. How can resolve this issue please
Reply


Messages In This Thread
RE: OpenSSL 'ChangeCipherSpec' MiTM Potential Vulnerability - by pgnair - 01-19-2021, 03:55 AM

Forum Jump:


Users browsing this thread: 1 Guest(s)