[stunnel-users] Default Ciphers

Michal Trojnara Michal.Trojnara at mirt.net
Wed Jun 17 18:12:54 CEST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

stunnel -version

On 17.06.2015 18:10, Clayton Keller wrote:
> Looking at the Changelog I see the following from the 5.15 info:
> 
> "MEDIUM ciphers (currently SEED and RC4) are removed from the
> default cipher list."
> 
> And this from the 5.00 info:
> 
> "Default "ciphers" updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2"
> due to AlFBPPS attack and bad performance of DH ciphersuites."
> 
> Given these to comments would it be accurate to say that the
> current default "ciphers" value is:
> 
> "HIGH:+3DES:+DH:!aNULL:!SSLv2"
> 
> Also, some of the docs indicate what the default value currently
> is. Is there an easier way to determine that value via CLI or other
> means?
> 
> Thanks
> 
> Clay _______________________________________________ stunnel-users
> mailing list stunnel-users at stunnel.org 
> https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=A++N
-----END PGP SIGNATURE-----



More information about the stunnel-users mailing list