This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL Cipher Exchange Method when connecting to smtps

Hi,

I'm using a sophos utm 9 with smtp proxy. Things are working great so far.

I checked the provided ciphers when connecting via port 465.

this was my command:
openssl s_client -cipher 'EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA256 EECDH+aRSA+RC4 EDH+aRSA EECDH RC4 !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS' -connect my.domain:465

This is the cipher, which is used.

>>>
SSL-Session:
Protocol : TLSv1
Cipher : RC4-SHA

This thread was automatically locked due to age.

Parents

0 AndiB. over 11 years ago

Hi Bob,
thanks for you fast reply and sorry for replying soo lately.

In the meantime, I did some research and found out, that the used cipher is set directly when creating the certificate.
This is, I guess, nothing new to you. [;)]

This means I have to create a certificate by own, with the cipher I prefer and the upload it to UTM.

The reason, why I want to do this is:
EECDH and EDH are more secure than PSK-methods, because they don't transfer the SSL-Session password during session init.

Cheers Andi
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 AndiB. over 11 years ago

Hi Bob,
thanks for you fast reply and sorry for replying soo lately.

In the meantime, I did some research and found out, that the used cipher is set directly when creating the certificate.
This is, I guess, nothing new to you. [;)]

This means I have to create a certificate by own, with the cipher I prefer and the upload it to UTM.

The reason, why I want to do this is:
EECDH and EDH are more secure than PSK-methods, because they don't transfer the SSL-Session password during session init.

Cheers Andi
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data