[stunnel-users] Default Ciphers

Clayton Keller inetadmin at ruraltel.net
Wed Jun 17 18:10:51 CEST 2015


Looking at the Changelog I see the following from the 5.15 info:

"MEDIUM ciphers (currently SEED and RC4) are removed from the default 
cipher list."

And this from the 5.00 info:

"Default "ciphers" updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2" due 
to AlFBPPS attack and bad performance of DH ciphersuites."

Given these to comments would it be accurate to say that the current 
default "ciphers" value is:

"HIGH:+3DES:+DH:!aNULL:!SSLv2"

Also, some of the docs indicate what the default value currently is. Is 
there an easier way to determine that value via CLI or other means?

Thanks

Clay



More information about the stunnel-users mailing list