They're still available if you ask for them. Can't we disable them at compile time like it was done for SSLv3? $ openssl version OpenSSL 1.0.1k 8 Jan 2015

They're still available if you ask for them. Can't we disable them at compile time like it was done for SSLv3? $ openssl version OpenSSL 1.0.1k 8 Jan 2015 $ openssl ciphers -v EXP EXP-EDH-RSA-DES-CBC-SHA SSLv3 Kx=DH(512) Au=RSA Enc=DES(40) Mac=SHA1 export EXP-EDH-DSS-DES-CBC-SHA SSLv3 Kx=DH(512) Au=DSS Enc=DES(40) Mac=SHA1 export EXP-ADH-DES-CBC-SHA SSLv3 Kx=DH(512) Au=None Enc=DES(40) Mac=SHA1 export EXP-DES-CBC-SHA SSLv3 Kx=RSA(512) Au=RSA Enc=DES(40) Mac=SHA1 export EXP-RC2-CBC-MD5 SSLv3 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export EXP-ADH-RC4-MD5 SSLv3 Kx=DH(512) Au=None Enc=RC4(40) Mac=MD5 export EXP-RC4-MD5 SSLv3 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779669 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=779669