<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>
<div>
<div>Hi all</div>
<div><br>
</div>
<div>
<div>I'm trying to re-add 3DES support (a temporary move, due to business requirements) to an NGINX (1.15.3) + OpenSSL (1.1.1) build via the NGINX build flag --with-openssl-opt=enable-weak-ssl-ciphers which i learnt from https://www.openssl.org/blog/blog/2016/08/24/sweet32/. </div>
<div><br>
</div>
<div>Whilst I do see some older ciphersuites being offered by NGINX after doing this, e.g. Camelia, Seed and so on, i don't see 3DES. I was expecting to be able to specifically list 3DES e.g. via DES-CBC3-SHA but that didn’t work. I have also tried adding @seclevel=0
to the ciphersuite string in NGINX but again, that didn’t work, I don’t see any 3DES ciphersuites available in NGINX.</div>
<div><br>
</div>
<div>I'm wondering whether something changed between the above article and the final version of OpenSSL 1.1.1? (I.e. Whether 3DES support was completely removed in OpenSSL 1.1.1).</div>
</div>
<div><br>
</div>
<div>Any pointers would be very much appreciated, I can’t find anything very useful on the web.</div>
<div><br>
</div>
<div>Cheers</div>
<div><br>
</div>
<div>
<div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">Neil Craig</font></font></div>
<div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">Lead Technical Architect | </font></font><span style="font-family: Calibri;">Online Technology Group</span></div>
<div><img src="cid:FDC52DA5-F1EC-4ED7-A69C-CACB83B41880" type="image/png"></div>
<div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">Broadcast Centre, London W12 7TQ | BC4 A3 </font></font></div>
<div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">Twitter: </font></font><a href="https://twitter.com/tdp_org">https://twitter.com/tdp_org</a></div>
<div><br>
</div>
</div>
</div>
</div>
</body>
</html>