Enabled weak cipher suites

Dr Paul Dale paul.dale at oracle.com
Wed Jun 26 06:58:27 UTC 2019


Yes there is but it will require a reconfigure and a recompile.

The big question is: "why?”
RC4 and MD5 are both considered broken.


Pauli
-- 
Dr Paul Dale | Cryptographer | Network Security & Encryption 
Phone +61 7 3031 7217
Oracle Australia



> On 26 Jun 2019, at 11:41 am, John Jiang <john.sha.jiang at gmail.com> wrote:
> 
> Hi,
> I'm using s_server and s_client from OpenSSL 1.1.1.
> It looks the weak cipher suites, like SSL_RSA_WITH_RC4_128_MD5, are disabled.
> Is there any way to re-enable these cipher suites?
> 
> Thanks!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20190626/e555e697/attachment.html>


More information about the openssl-users mailing list