Re: Enabled weak cipher suites

[Dr Paul Dale <paul.dale@xxxxxxxxxx>]

Yes there is but it will require a reconfigure and a recompile.

The big question is: "why?”

RC4 and MD5 are both considered broken.

Pauli

-- 
Dr Paul Dale | Cryptographer | Network Security & Encryption 
Phone +61 7 3031 7217
Oracle Australia

On 26 Jun 2019, at 11:41 am, John Jiang <john.sha.jiang@xxxxxxxxx> wrote:

Hi,

I'm using s_server and s_client from OpenSSL 1.1.1.

It looks the weak cipher suites, like SSL_RSA_WITH_RC4_128_MD5, are disabled.

Is there any way to re-enable these cipher suites?

Thanks!