4 ms·
Is there an easy way to check our own servers? I can see the fix is to add !EXPORT to the end of the cipher list, but how do we check that the server requires t
by jsmeaton 12y ago
Is there an easy way to check our own servers? I can see the fix is to add !EXPORT to the end of the cipher list, but how do we check that the server requires the fix?
Really disappointed with this announcement. Some of the other named exploits have come with repro instructions and usually with a fix (shellshock notwithstanding). This is just a description and a shame list.
- devinegan 12y agoI updated a public cipher checking script earlier to specifically check EXP ciphers: https://gist.github.com/degan/70e8059507d173751294 https://gist.github.com/degan/70e8059507d173751294 It will attempt to connect to the domain you specify with all of the EXP ciphers your OpenSSL knows about.