Security/Server Side TLS: Difference between revisions

Security/Server Side TLS (view source)

Revision as of 17:54, 14 October 2013

908 bytes removed , 14 October 2013

→‎Citrix Netscaler

Ulfr

Confirmed users

529

edits

@@ Line 240: / Line 240: @@
 <pre>
 add ssl cipher MozillaDefault
-bind ssl cipher MozillaDefault -cipherName SSL3-RC4-SHA
+bind ssl cipher MozillaDefault -cipherName TLS1-DHE-DSS-AES-128-CBC-SHA
+bind ssl cipher MozillaDefault -cipherName TLS1-DHE-RSA-AES-128-CBC-SHA
 bind ssl cipher MozillaDefault -cipherName TLS1-DHE-DSS-AES-256-CBC-SHA
 bind ssl cipher MozillaDefault -cipherName TLS1-DHE-RSA-AES-256-CBC-SHA
-bind ssl cipher MozillaDefault -cipherName TLS1-DHE-DSS-AES-128-CBC-SHA
-bind ssl cipher MozillaDefault -cipherName TLS1-DHE-RSA-AES-128-CBC-SHA
 bind ssl cipher MozillaDefault -cipherName TLS1-AES-256-CBC-SHA
 bind ssl cipher MozillaDefault -cipherName TLS1-AES-128-CBC-SHA
+bind ssl cipher MozillaDefault -cipherName SSL3-RC4-SHA
 add ssl certKey <domain> -cert <cert> -key <key>
 add ssl certKey <intermediateCertName> -cert <intermediateCertName>
@@ Line 256: / Line 256: @@
 </pre>
 The configuration can be viewed with the following commands:
+* <pre>show ssl cipher MozillaDefault</pre>
 <pre>
-> show ssl cipher MozillaDefault
-)    Cipher Name: SSL3-RC4-SHA
-    Description: SSLv3 Kx=RSA      Au=RSA  Enc=RC4(128)  Mac=SHA1
-)    Cipher Name: TLS1-DHE-DSS-AES-256-CBC-SHA
-    Description: TLSv1 Kx=DH       Au=DSS  Enc=AES(256)  Mac=SHA1
-)    Cipher Name: TLS1-DHE-RSA-AES-256-CBC-SHA
-    Description: TLSv1 Kx=DH       Au=RSA  Enc=AES(256)  Mac=SHA1
-)    Cipher Name: TLS1-DHE-DSS-AES-128-CBC-SHA
-    Description: TLSv1 Kx=DH       Au=DSS  Enc=AES(128)  Mac=SHA1
-)    Cipher Name: TLS1-DHE-RSA-AES-128-CBC-SHA
-    Description: TLSv1 Kx=DH       Au=RSA  Enc=AES(128)  Mac=SHA1
-)    Cipher Name: TLS1-AES-256-CBC-SHA
-    Description: TLSv1 Kx=RSA      Au=RSA  Enc=AES(256)  Mac=SHA1
-)    Cipher Name: TLS1-AES-128-CBC-SHA
-    Description: TLSv1 Kx=RSA      Au=RSA  Enc=AES(128)  Mac=SHA1
 > show ssl vserver marketplace.firefox.com:https
@@ Line 289: / Line 274: @@
      Push Encryption Trigger: Always
      Send Close-Notify: YES
-)    CertKey Name: marketplace.mozilla.org.san    Server Certificate
-)    Cipher Name: MozillaDefault
-    Description: User Created Cipher Group
 </pre>
 == Apache ==