Bug #291: Avoid using weak cipher suites for TLS - Open eCard - Open eCard Development Center

Actions

Copy link

Bug #291

closed

Avoid using weak cipher suites for TLS

Added by Tobias Wich over 10 years ago. Updated over 10 years ago.

Status:

Closed

Priority:

High

Assignee:

Tobias Wich

Target version:

1.1.0

Start date:

04/09/2014

Due date:

% Done:

Estimated time:

1.00 h

Reviewer:

Build Version:

Description

TR-03116-4 recommends ciphers to use for TLS connections.
It has to be examined which cipher suites are accepted by bouncy castle and whether it is feasable to restrict the set of used ciphers to the recommended set. We should also check whether other cipher suites should be used because of compatibility with old servers.