Excluding RC4 ciphers still shows up in a TLS scan: Difference between revisions

No edit summary
 
Line 9: Line 9:


==Resolution==
==Resolution==
For RC4, we have to specify the 'SSL' ciphers in the exclude list as well:
zmprov mcf +zimbraSSLExcludeCipherSuites SSL_RSA_WITH_RC4_128_MD5
zmprov mcf +zimbraSSLExcludeCipherSuites SSL_RSA_WITH_RC4_128_SHA
zmprov mcf +zimbraSSLExcludeCipherSuites SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
zmmailboxdctl restart


The only change made is that 'TLS' has been replaced with 'SSL' for these specific cipher suites.
https://wiki.zimbra.com/wiki/Cipher_suites
 
==Additional Content==
* For detailed explanations of and Ciphers and Security, please visit the official [[https://wiki.zimbra.com/wiki/Security/Collab/86 Security Wiki page]].


{{Article Footer|Zimbra Collaboration 8.6, 8.5, 8.0|05/28/2015}}
{{Article Footer|Zimbra Collaboration 8.6, 8.5, 8.0|05/28/2015}}
{{NeedSME|SME1|SME2|Copyeditor}}
{{NeedSME|SME1|SME2|Copyeditor}}

Latest revision as of 06:50, 4 January 2022

Excluding RC4 ciphers still shows up in a TLS scan

   KB 22042        Last updated on 2022-01-4  




0.00
(0 votes)

Purpose

Excluding RC4 ciphers still shows up in a TLS scan.

Resolution

https://wiki.zimbra.com/wiki/Cipher_suites

Verified Against: Zimbra Collaboration 8.6, 8.5, 8.0 Date Created: 05/28/2015
Article ID: https://wiki.zimbra.com/index.php?title=Excluding_RC4_ciphers_still_shows_up_in_a_TLS_scan Date Modified: 2022-01-04



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Wiki/KB reviewed by SME1 SME2 Copyeditor Last edit by Barry de Graaff
Jump to: navigation, search