Wednesday, October 6, 2010

nessus: The remote service supports the use of weak SSL ciphers.

1, test your ssl if support weak ssl
openssl s_client -connect 172.22.113.113:8443 -cipher LOW

2, disable tomcat weak ciphers
In order to achieve this I made a simple change:

in //conf/templates/server.xml I added:

ciphers="SSL_RSA_WITH_RC4_128_MD5" right after sslProtocol = "TLS" and restarted the hyperic server.