Forums » Open discussion »

Wt, https and ciphers

Added by Arnaud Puret about 1 year ago

Hi !

I get the list of supported ciphers from WtHttp[s] (with sslscan, see below). How can I restrict this list ?

Thanks for your help.

Supported Server Ciphers:
Accepted SSLv3 256 bits DHE-RSA-AES256-SHA
Accepted SSLv3 256 bits DHE-RSA-CAMELLIA256-SHA
Accepted SSLv3 256 bits AES256-SHA
Accepted SSLv3 256 bits CAMELLIA256-SHA
Accepted SSLv3 168 bits EDH-RSA-DES-CBC3-SHA
Accepted SSLv3 168 bits DES-CBC3-SHA
Accepted SSLv3 128 bits DHE-RSA-AES128-SHA
Accepted SSLv3 128 bits DHE-RSA-SEED-SHA
Accepted SSLv3 128 bits DHE-RSA-CAMELLIA128-SHA
Accepted SSLv3 128 bits AES128-SHA
Accepted SSLv3 128 bits SEED-SHA
Accepted SSLv3 128 bits CAMELLIA128-SHA
Accepted SSLv3 128 bits RC4-SHA
Accepted SSLv3 128 bits RC4-MD5
Accepted SSLv3 56 bits EDH-RSA-DES-CBC-SHA
Accepted SSLv3 56 bits DES-CBC-SHA
Accepted SSLv3 40 bits EXP-EDH-RSA-DES-CBC-SHA
Accepted TLSv1 256 bits DHE-RSA-AES256-SHA
Accepted TLSv1 256 bits DHE-RSA-CAMELLIA256-SHA
Accepted TLSv1 256 bits AES256-SHA
Accepted TLSv1 256 bits CAMELLIA256-SHA
Accepted TLSv1 168 bits EDH-RSA-DES-CBC3-SHA
Accepted TLSv1 168 bits DES-CBC3-SHA
Accepted TLSv1 128 bits DHE-RSA-AES128-SHA
Accepted TLSv1 128 bits DHE-RSA-SEED-SHA
Accepted TLSv1 128 bits DHE-RSA-CAMELLIA128-SHA
Accepted TLSv1 128 bits AES128-SHA
Accepted TLSv1 128 bits SEED-SHA
Accepted TLSv1 128 bits CAMELLIA128-SHA
Accepted TLSv1 128 bits RC4-SHA
Accepted TLSv1 128 bits RC4-MD5
Accepted TLSv1 56 bits EDH-RSA-DES-CBC-SHA
Accepted TLSv1 56 bits DES-CBC-SHA
Accepted TLSv1 40 bits EXP-EDH-RSA-DES-CBC-SHA


Replies (3)

RE: Wt, https and ciphers - Added by Wim Dumon about 1 year ago

Arnaud,

That is currently not possible. Your request is certainly valid, and therefore we will add it to Wt.

I've added your suggestion to our internal SSL branch, which will be merged in the near future.

Regards,
Wim.

RE: Wt, https and ciphers - Added by Arnaud Puret about 1 year ago

Hi Wim,

Bad and good news for my project... I have some very sensible admin about ciphers.
I hope finding such configuration in Wt soon.

Thanks for all.

RE: Wt, https and ciphers - Added by Wim Dumon 11 months ago

Arnaud,

This is now part of the new Wt version, to be released really soon. It is a startup option of the httpd - see help for usage info:

./hello.wt -- help

(replace hello.wt with your wt application)

Wim.

(1-3/3)