help with jabber1.4.3 and TLS ciphers config
Henry <[email protected]> Fri, 25 Jan 2013 15:24:06 -0800
| Newsgroups | gmane.network.jabber.admin |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
--===============0527182694==
Content-Type: multipart/alternative;
boundary="------------070801030408030009030500"
This is a multi-part message in MIME format.
--------------070801030408030009030500
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Hey guys I'm hoping you can help me with some configuration challenges
I'm having using TLS and specifying the ciphers in my jabber.xml file.
My goals is to only allow certain ciphers or pretty much disable all
ciphers except for 1 or 2.
My server is running debian squeeze 6.0.4
Jabberd Version 1.4.3
From googling around only thing I found was someone saying you're
suppose to add the <tls> tag under <io> and inside you specified the
cipher with <ciphers> tag. This is my current config:
<io>
my io config..
blah..
blah...
/ <tls>//
////<ciphers>AES_256_CBC</ciphers>//
// </tls>/
</io>
however when ever I test it I still able to connect using other cyphers:
/
//$ openssl s_client -connect <myserver>:5223 -tls1 -cipher EXP-RC4-MD5
2>1 | grep Cipher//
//New, TLSv1/SSLv3, Cipher is EXP-RC4-MD5//
// Cipher : EXP-RC4-MD5//
//
//$ openssl s_client -connect <myserver>:5223 -tls1 -cipher AES128-SHA
2>1 | grep Cipher//
//New, TLSv1/SSLv3, Cipher is AES128-SHA//
// Cipher : AES128-SHA//
//
// $ openssl s_client -connect <myserver>:5223 -tls1 -cipher DES-CBC-SHA
2>1 | grep Cipher//
//New, TLSv1/SSLv3, Cipher is DES-CBC-SHA//
// Cipher : DES-CBC-SHA/
I've also try this cause someone said it needs the <credentials>:
/ <tls>//
// <credentials>//
// <ciphers>AES_256_CBC</ciphers>//
// </credentials>//
// </tls>/
but that still allows a bunch of ciphers and debug doesn't really show
any errors or problems. At this point I'm pretty user I'm missing
something.
Any help would be appreciated! Let me know if you need any other info.
Thanks!
--------------070801030408030009030500
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Hey guys I'm hoping you can help me with some configuration
challenges I'm having using TLS and specifying the ciphers in my
jabber.xml file.<br>
<br>
My goals is to only allow certain ciphers or pretty much disable all
ciphers except for 1 or 2.<br>
<br>
My server is running debian squeeze 6.0.4<br>
Jabberd Version 1.4.3<br>
<br>
From googling around only thing I found was someone saying you're
suppose to add the <tls> tag under <io> and inside you
specified the cipher with <ciphers> tag. This is my current
config:<br>
<br>
<io><br>
my io config..<br>
blah..<br>
blah...<br>
<br>
<i> <tls></i><i><br>
</i><i> </i><i><ciphers>AES_256_CBC</ciphers></i><i><br>
</i><i> </tls></i><br>
<br>
</io><br>
<br>
<br>
however when ever I test it I still able to connect using other
cyphers:<br>
<i><br>
</i><i>$ openssl s_client -connect <myserver>:5223 -tls1
-cipher EXP-RC4-MD5 2>1 | grep Cipher</i><i><br>
</i><i>New, TLSv1/SSLv3, Cipher is EXP-RC4-MD5</i><i><br>
</i><i> Cipher : EXP-RC4-MD5</i><i><br>
</i><i><br>
</i><i>$ openssl s_client -connect <myserver>:5223 -tls1
-cipher AES128-SHA 2>1 | grep Cipher</i><i><br>
</i><i>New, TLSv1/SSLv3, Cipher is AES128-SHA</i><i><br>
</i><i> Cipher : AES128-SHA</i><i><br>
</i><i><br>
</i><i> $ openssl s_client -connect <myserver>:5223 -tls1
-cipher DES-CBC-SHA 2>1 | grep Cipher</i><i><br>
</i><i>New, TLSv1/SSLv3, Cipher is DES-CBC-SHA</i><i><br>
</i><i> Cipher : DES-CBC-SHA</i><br>
<br>
<br>
I've also try this cause someone said it needs the
<credentials>:<br>
<br>
<i> <tls></i><i><br>
</i><i> <credentials></i><i><br>
</i><i> <ciphers>AES_256_CBC</ciphers></i><i><br>
</i><i> </credentials></i><i><br>
</i><i> </tls></i><br>
<br>
but that still allows a bunch of ciphers and debug doesn't really
show any errors or problems. At this point I'm pretty user I'm
missing something.<br>
<br>
Any help would be appreciated! Let me know if you need any other
info.<br>
<br>
Thanks!<br>
</body>
</html>
--------------070801030408030009030500--
--===============0527182694==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
JAdmin mailing list
Info: http://mail.jabber.org/mailman/listinfo/jadmin
Unsubscribe: [email protected]
_______________________________________________
--===============0527182694==--