The printable version is no longer supported and may have rendering errors. Please update your browser bookmarks and please use the default browser print function instead.
- Zimbra Tech Center
- Certified
- Excluding RC4 ciphers still shows up in a TLS scan
Excluding RC4 ciphers still shows up in a TLS scan
KB 22042
|
Last updated on 2018-05-30
|
Last updated by Phoenix
|
|
Verified in: ZCS 8.6
ZCS 8.5
ZCS 8.0
|
|
- This is certified documentation and is protected for editing by Zimbra Employees & Moderators only.
|
KB 22042
|
Last updated on 2018-05-30
|
|
|
- This is certified documentation and is protected for editing by Zimbra Employees & Moderators only.
|
- This article is a Work in Progress, and may be unfinished or missing sections.
Purpose
Excluding RC4 ciphers still shows up in a TLS scan.
Resolution
For RC4, we have to specify the 'SSL' ciphers in the exclude list as well:
zmprov mcf +zimbraSSLExcludeCipherSuites SSL_RSA_WITH_RC4_128_MD5
zmprov mcf +zimbraSSLExcludeCipherSuites SSL_RSA_WITH_RC4_128_SHA
zmprov mcf +zimbraSSLExcludeCipherSuites SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA
zmmailboxdctl restart
The only change made is that 'TLS' has been replaced with 'SSL' for these specific cipher suites.
Additional Content
- For detailed explanations of and Ciphers and Security, please visit the official [Wiki page].
Try Zimbra
Try Zimbra Collaboration with a 60-day free trial.
Get it now »
Want to get involved?
You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »
Looking for a Video?
Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »
Wiki/KB reviewed by
|
SME1
|
SME2
|
Copyeditor
|
Last edit by Phoenix
|