Tag: ssl
All the articles with the tag "ssl".
Java SSL/TLS Ciphers
Updated:You can specify what cipher suites Java uses by editing the file: %JAVA_HOME%\lib\security\java.security This file must also be used by the Java applicatio
IIS HTTP to HTTPS
Updated:In the process of deploying an IIS web server we'd like to ensure that browsers that visit the http unencrypted page, get redirected to the https encrypted
SSL/TLS as a Server Admin
Updated:I don't trust you just because we can encrypt data together. I need to trust you based on a 3rd party we both trust telling me that you are who you say you are.
Diving Deeper into Windows SSL
This response to a question raised some interest and I found it very interesting. I then went to investigate the keys and values on my own machine. This ca
Horizon SSL/TLS Ciphers
Updated:After running an SSL scan on our external facing Horizon Security Server, using Qualys' SSLTest and receiving an A- rating, I wanted to fix that by getting
TLS and NPS
Updated:Looks like NPS only supports TLS1.0 by default. So if you go restricting your ciphers too much you'll find none of your NPS clients able to connect using E
Strong Ciphers
Updated:Strong Ciphers for Apache, nginx and Lighttpd https://cipherli.st/ Mozilla SSL Configuration Generator https://mozilla.github.io/server-side-tls/ssl-config
SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam)
Updated:Create and set the following registry key value: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\KeyExchangeAlgorithms\Diffi
SSL/TLS Diffie-Hellman Modulus <= 1024 Bits (Logjam) - Tomcat
Updated:Disable the ciphers that use Diffie-Hellman by adding !DHE into your ciphers list ciphers="HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!kRSA:!3DES:!DHE" Now
SSL 64-bit Block Size Cipher Suites Supported (SWEET32) - Tomcat
Updated:Following on from the Windows vulnerability for SWEET32, Here's how to resolve the same issue with Tomcat 8. This use the OpenSSL format string for ciphers