How to check Diffie-Hellman Ciphers and DHE_EXPORT for tomcat
How to verify :-
The remote host supports a set of weak ciphers. pluginName:SSL/TLS EXPORT_DHE <= 512-bit Export Cipher Suites .
And
The remote host allows SSL/TLS connections with one or more Diffie-Hellman moduli less than or equal to 1024 bits. pluginName:SSL/TLS Diffie-Hellman Modulus <= 1024 Bits
I want to check bit length supported by current tomcat.
for tomcat.
I have below ciphers in server.xml
TLS_RSA_WITH_AES_128_CBC_SHA
TLS_DHE_RSA_WITH_AES_128_CBC_SHA,
TLS_DHE_DSS_WITH_AES_128_CBC_SHA,
SSL_RSA_WITH_3DES_EDE_CBC_SHA,
SSL_DHE_RSA_WITH_3DES_EDE_CBC_SHA,
SSL_DHE_DSS_WITH_3DES_EDE_CBC_SHA
what does they mean?
Last edited by gaurav_s; 06-25-2015 at 06:45 AM.
|