:: Re: [DNG] Install OpenSSL (libssl, …
Página Principal
Delete this message
Reply to this message
Autor: Gregory Nowak
Data:  
Para: Mike Tubby
CC: dng
Assunto: Re: [DNG] Install OpenSSL (libssl, libcrypto) with weak ciphers
On Wed, Jul 21, 2021 at 02:20:50PM +0100, Mike Tubby wrote:
> I am trying to migrate a legacy system from Ubuntu 16.04 to Devuan 3.0 where
> we have mobile IoT devices based on Cinterion TC65i that are 10+ years old
> with a limited sub-set of SSL 3.0/TLS 1.0 ciphers in its Java-ME runtime, in
> particular we need DES/3DESciphers like RSA-3DES-CBC-SHA


There's an easier way. Just install the openssl packages already
provided in Devuan 3. Edit /etc/ssl/openssl.cnf, and change the last
line from:

CipherString = DEFAULT@SECLEVEL=2

to:

CipherString = DEFAULT@SECLEVEL=1

This will weaken the security of your ssl connections, but it sounds
like you are already prepared to accept that risk.

Greg


--
web site: http://www.gregn.net
gpg public key: http://www.gregn.net/pubkey.asc
skype: gregn1
(authorization required, add me to your contacts list first)
If we haven't been in touch before, e-mail me before adding me to your contacts.

--
Free domains: http://www.eu.org/ or mail dns-manager@???