[Pound Mailing List] Getting pound to not support DES

--f403045f5048242ee605602afe07
Content-Type: text/plain; charset="UTF-8"

Here's my Ciphers in pound.cfg:

 Ciphers
"ALL:!ADH:!EXPORT:!SSLv2:!aNULL:!eNULL:!DES:!MD5:!PSK:!RC4:!DH:!LOW:+HIGH:+MEDIUM"


Then I do a sslscan on the pound server and save the data to
/tmp/sslscan.out,

First I check for MD5:

brad.allison@devops-west:/usr/local/devops/bin> grep MD5 /tmp/sslscan.out |
wc -l
0


Then I check for RC4:

brad.allison@devops-west:/usr/local/devops/bin> grep RC4 /tmp/sslscan.out |
wc -l
0


Then I check for DES:

brad.allison@devops-west:/usr/local/devops/bin> grep DES /tmp/sslscan.out |
wc -l
6

brad.allison@devops-west:/usr/local/devops/bin> grep DES /tmp/sslscan.out
    Accepted  TLSv1  112 bits  ECDHE-RSA-DES-CBC3-SHA
    Accepted  TLSv1  112 bits  DES-CBC3-SHA
    Accepted  TLS11  112 bits  ECDHE-RSA-DES-CBC3-SHA
    Accepted  TLS11  112 bits  DES-CBC3-SHA
    Accepted  TLS12  112 bits  ECDHE-RSA-DES-CBC3-SHA
    Accepted  TLS12  112 bits  DES-CBC3-SHA



So why is it allowing DES support when I have !DES in my Ciphers list?

-brad

--f403045f5048242ee605602afe07
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Here&#39;s my Ciphers in pound.cfg:<div><br></div><blockqu=
ote style=3D"margin:0 0 0 40px;border:none;padding:0px"><div><div><div><fon=
t face=3D"monospace, monospace" color=3D"#0000ff">=C2=A0Ciphers &quot;ALL:!=
ADH:!EXPORT:!SSLv2:!aNULL:!eNULL:!DES:!MD5:!PSK:!RC4:!DH:!LOW:+HIGH:+MEDIUM=
&quot;</font></div></div></div></blockquote><div><div><br></div></div><div>=
Then I do a sslscan on the pound server and save the data to /tmp/sslscan.o=
ut,=C2=A0</div><div><br></div><div>First I check for MD5:</div><div><br></d=
iv><blockquote style=3D"margin:0 0 0 40px;border:none;padding:0px"><div><di=
v><font face=3D"monospace, monospace" color=3D"#0000ff">brad.allison@devops=
-west:/usr/local/devops/bin&gt; grep MD5 /tmp/sslscan.out | wc -l</font></d=
iv></div><div><div><font face=3D"monospace, monospace" color=3D"#0000ff">0<=
/font></div></div></blockquote><div><br></div><div>Then I check for RC4:</d=
iv><div><br></div><blockquote style=3D"margin:0 0 0 40px;border:none;paddin=
g:0px"><div><div><font face=3D"monospace, monospace" color=3D"#0000ff">brad=
.allison@devops-west:/usr/local/devops/bin&gt; grep RC4 /tmp/sslscan.out | =
wc -l</font></div></div><div><div><font face=3D"monospace, monospace" color=
=3D"#0000ff">0</font></div></div></blockquote><div><div><br></div><div>Then=
 I check for DES:</div><div><br></div></div><blockquote style=3D"margin:0 0=
 0 40px;border:none;padding:0px"><div><div><font face=3D"monospace, monospa=
ce" color=3D"#0000ff">brad.allison@devops-west:/usr/local/devops/bin&gt; gr=
ep DES /tmp/sslscan.out | wc -l</font></div></div><div><div><font face=3D"m=
onospace, monospace" color=3D"#0000ff">6</font></div></div><div><div><font =
face=3D"monospace, monospace" color=3D"#0000ff"><br></font></div></div><div=
><div><font face=3D"monospace, monospace" color=3D"#0000ff">brad.allison@de=
vops-west:/usr/local/devops/bin&gt; grep DES /tmp/sslscan.out=C2=A0</font><=
/div></div><div><div><font face=3D"monospace, monospace" color=3D"#0000ff">=
=C2=A0 =C2=A0 Accepted =C2=A0TLSv1 =C2=A0112 bits =C2=A0ECDHE-RSA-DES-CBC3-=
SHA</font></div></div><div><div><font face=3D"monospace, monospace" color=
=3D"#0000ff">=C2=A0 =C2=A0 Accepted =C2=A0TLSv1 =C2=A0112 bits =C2=A0DES-CB=
C3-SHA</font></div></div><div><div><font face=3D"monospace, monospace" colo=
r=3D"#0000ff">=C2=A0 =C2=A0 Accepted =C2=A0TLS11 =C2=A0112 bits =C2=A0ECDHE=
-RSA-DES-CBC3-SHA</font></div></div><div><div><font face=3D"monospace, mono=
space" color=3D"#0000ff">=C2=A0 =C2=A0 Accepted =C2=A0TLS11 =C2=A0112 bits =
=C2=A0DES-CBC3-SHA</font></div></div><div><div><font face=3D"monospace, mon=
ospace" color=3D"#0000ff">=C2=A0 =C2=A0 Accepted =C2=A0TLS12 =C2=A0112 bits=
 =C2=A0ECDHE-RSA-DES-CBC3-SHA</font></div></div><div><div><font face=3D"mon=
ospace, monospace" color=3D"#0000ff">=C2=A0 =C2=A0 Accepted =C2=A0TLS12 =C2=
=A0112 bits =C2=A0DES-CBC3-SHA</font></div></div></blockquote><div><br></di=
v><div><br></div><div>So why is it allowing DES support when I have !DES in=
 my Ciphers list?</div><div><br></div><div>-brad</div></div>

--f403045f5048242ee605602afe07--

--
To unsubscribe send an email with subject unsubscribe to [email protected]
Please contact [email protected] for questions.