Disable support for LOW encryption ciphers.

RESULT OF THE SECURITY SCAN:(failed)---**********************
The Secure Socket Layer (SSL) protocol allows for secure communication between a client and a server.
 
SSL encryption ciphers are classified based on encryption key length as follows:
 
HIGH - key length larger than 128 bits
 
MEDIUM - key length equal to 128 bits
 
LOW - key length smaller than 128 bits
 
Messages encrypted with LOW encryption ciphers are easy to decrypt. Commercial SSL servers should only support MEDIUM or HIGH strength
 
ciphers to guarantee transaction security.
 
The following link provides more information about this vulnerability:
 
Analysis of the SSL 3.0 protocol
 
Please note that this detection only checks for weak cipher support at the SSL layer. Some servers may implement additional protection at the data
 
layer. For example, some SSL servers and SSL proxies (such as SSL accelerators) allow cipher negotiation to complete but send back an error
 
message and abort further communication on the secure channel. This vulnerability may not be exploitable for such configurations.
 
IMPACT:
 
An attacker can exploit this vulnerability to decrypt secure communications without authorization.
 
SOLUTION:
 
Disable support for LOW encryption ciphers.
 
 
 
Apache
 
Typically, for Apache/mod_ssl, httpd.conf or ssl.conf should have the following lines:
 
SSLProtocol -ALL +SSLv3 +TLSv1
 
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
 
For Apache/apache_ssl include the following line in the configuration file (httpsd.conf):
 
SSLRequireCipher ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
 
Tomcat
 
sslProtocol="SSLv3"
 
ciphers="SSL_RSA_WITH_RC4_128_MD5,SSL_RSA_WITH_RC4_128_SHA,SSL_DHE_RSA_W
 
ITH_3DES_EDE_CBC_SHA"
 
IIS
 
How to Restrict the Use of Certain Cryptographic Algorithms and Protocols in Schannel.dll (Windows restart required)
 
How to disable PCT 1.0, SSL 2.0, SSL 3.0, or TLS 1.0 in Internet Information Services (Windows restart required)
 
Security Guidance for IIS

                                  

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:
50:
51:
52:
53:
54:
55:
56:
57:
58:
59:
60:
61:
62: