[openssl-users] How to disable all EXPORT Ciphers?

Salz, Rich rsalz at akamai.com
Mon Mar 9 15:00:45 UTC 2015


>How to I disable all EXPORT Ciphers from OpenSSL?
> Will the use of string "kEDH:ALL:!ADH:!DES:!LOW:!EXPORT:+SSLv2:@STRENGTH"

	; openssl ciphers -v kEDH:ALL:!ADH:!DES:!LOW:!EXPORT:+SSLv2:@STRENGTH | grep EXP
	;
Yes.

But really, SSLv2?  Really?  You have clients that haven't been updated since the last century?

--  
Senior Architect, Akamai Technologies
IM: rsalz at jabber.me Twitter: RichSalz


More information about the openssl-users mailing list