<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p
{mso-style-priority:99;
mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:Consolas;
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas;color:#1F497D">Yes, I think i’m going to turn that list off, it’s just clutter.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:Consolas;color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Ralph Mitchell [mailto:ralphmitchell@gmail.com]
<br>
<b>Sent:</b> Tuesday, August 04, 2015 15:43<br>
<b>To:</b> Ribeiro, Glauber<br>
<b>Cc:</b> xymon@xymon.com<br>
<b>Subject:</b> Re: [Xymon] Why does the cipher list in sslcert test show disabled ciphers?<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p>It's not giving you a list of the ciphers the remote host permits. All it does is cycle through the list of ciphers available on the Xymon server. I think there's a flag (for xymonnet, maybe?) that turns off that list. A long time back I patched my copy
of xymonnet to only return the cipher actually used to talk to the remore server.<o:p></o:p></p>
<p>There's a program called sslscan that actually tests the entire list of ciphers against the remote host and tells you what works and what fails. That could be incorporated into an external test, maybe.<o:p></o:p></p>
<p>Ralph Mitchell<o:p></o:p></p>
<div>
<p class="MsoNormal">On Aug 4, 2015 12:41 PM, "Ribeiro, Glauber" <<a href="mailto:glauber.ribeiro@experian.com">glauber.ribeiro@experian.com</a>> wrote:<o:p></o:p></p>
<p class="MsoNormal">Why does the list of ciphers in the "sslcert" xymon test show ciphers that are disabled on the server? For example, we have disabled RC4 ciphers on our servers, and confirmed using the "Qualys SSL Labs" server test, that they are turned
off. However, xymon still shows them.<br>
<br>
g<br>
_______________________________________________<br>
Xymon mailing list<br>
<a href="mailto:Xymon@xymon.com">Xymon@xymon.com</a><br>
<a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.xymon.com_mailman_listinfo_xymon&d=BQMFaQ&c=BNNF-YNv0CLLslhP2Bcx5Q&r=SjsIRf81D06XmEsmKkV_wxtLjrsUQpuz8iegmn0NIEg&m=rIw_5dYH-FEgtOSRM6E1_zSnZWIjukwDIPbjdKUSD0M&s=bIJ9DajJNn28muXrZgI4Fc_BJDJsQiOeIubBCIwcv50&e=" target="_blank">http://lists.xymon.com/mailman/listinfo/xymon[lists.xymon.com]</a><o:p></o:p></p>
</div>
</div>
</body>
</html>