Allied Telesis AlliedWare gui http server accepted cipher suites
When configuring a AT-9924T switch running AlliedWare 2.9.2 to serve ssl
encryption on the http server as described in the manual like this:
create enco key=0 type=rsa length=2048
set system distinguishedname="cn=switch1,o=my_company,c=us"
create pki certificate=cer_name keypair=0 serialnumber=12345
subject="cn=172.30.1.105,o=my_company, c=us"
add pki certificate=cer_name location=cer_name.cer trust=yes
set http server security=on sslkey=0 port=443
It only allows two low-security ciphers which are not supported by any
modern browsers (firefox,chrome,ie) anymore. The only browser I found
which still does support them is IE6, which is not really an option.
Supported Server Cipher(s):
Accepted SSLv3 56 bits DES-CBC-SHA
Accepted SSLv3 40 bits EXP-DES-CBC-SHA
How can I configure the http server so it allows better ciphers which are
supported by modern browsers?
No comments:
Post a Comment