How to Disable Insecure Cyphers SSL

slinky

• December 24, 2015 10:42

Running a test at Qualys resulted in seeing a number of insecure cyphers that prevented me from getting an acceptable "A" grade. Since WHM / CPanel has its own way of doing things, I preferred to get a more official response as to how to remove these Cyphers that most respected places shouldn't even be enabled in the first place. TLS_ECDHE_RSA_WITH_RC4_128_SHA (0xc011) ECDH secp256r1 (eq. 3072 bits RSA) FS INSECURE 128 TLS_RSA_WITH_RC4_128_SHA (0x5) INSECURE 128 TLS_RSA_WITH_RC4_128_MD5 (0x4) INSECURE 128 RC4 Yes INSECURE (more info) Thanks to all in advance and happy holidays!

• 

  cPanelMichael

  • December 24, 2015 15:59

  Hello :) Please see the following document on how to update cipher protocols: How to Adjust Cipher Protocols Additional discussions about this are found on the following thread: Adjusting Cipher Protocols Thank you.

  0
• 

  slinky

  • December 24, 2015 17:09

  I just found this as well - thanks Michael How to disable anonymous (insecure) suites ? Ref: SSLLABS

  0
• 

  slinky

  • December 24, 2015 17:26

  I'll be honest. I still haven't gotten it to work and that thread, over a year old, is a cluster of confusion with most not resolving anything about how to disable. This is clearly not a simple task. If I can find the solution Ill tray to post a guide.

  0
• 

  cPanelMichael

  • February 02, 2016 20:34

  I'll be honest. I still haven't gotten it to work and that thread, over a year old, is a cluster of confusion with most not resolving anything about how to disable. This is clearly not a simple task. If I can find the solution Ill tray to post a guide.

  
  It looks like the test you provided now shows an "A" rating. Could you verify if the issue is now resolved? Thank you.

  0
• 

  slinky

  • February 02, 2016 22:54

  After a massive amount of searching and experimenting, I'm assuming that what I stuck in there eventually worked given the rating. I'm still waiting to see if Analytics shows higher bounce rates or issues with older browsers. Hopefully it's good - thanks for double checking and responding.

  0
• 

  Luke J

  • December 05, 2016 10:31

  @slinky I have exactly the same issue but unfortunately I'm still getting B grade. Can you please let me know how did you overcome this ? I would appreciate any help.

  0
• 

  cPanelMichael

  • December 05, 2016 20:00

  I have exactly the same issue but unfortunately I'm still getting B grade. Can you please let me know how did you overcome this ?

  
  Hello, Could you let us know the specific output from the report? Thank you.

  0

Please sign in to leave a comment.