
Looking at the Changelog I see the following from the 5.15 info: "MEDIUM ciphers (currently SEED and RC4) are removed from the default cipher list." And this from the 5.00 info: "Default "ciphers" updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2" due to AlFBPPS attack and bad performance of DH ciphersuites." Given these to comments would it be accurate to say that the current default "ciphers" value is: "HIGH:+3DES:+DH:!aNULL:!SSLv2" Also, some of the docs indicate what the default value currently is. Is there an easier way to determine that value via CLI or other means? Thanks Clay

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 stunnel -version On 17.06.2015 18:10, Clayton Keller wrote:
Looking at the Changelog I see the following from the 5.15 info:
"MEDIUM ciphers (currently SEED and RC4) are removed from the default cipher list."
And this from the 5.00 info:
"Default "ciphers" updated to "HIGH:MEDIUM:+3DES:+DH:!aNULL:!SSLv2" due to AlFBPPS attack and bad performance of DH ciphersuites."
Given these to comments would it be accurate to say that the current default "ciphers" value is:
"HIGH:+3DES:+DH:!aNULL:!SSLv2"
Also, some of the docs indicate what the default value currently is. Is there an easier way to determine that value via CLI or other means?
Thanks
Clay _______________________________________________ stunnel-users mailing list stunnel-users@stunnel.org https://www.stunnel.org/cgi-bin/mailman/listinfo/stunnel-users -----BEGIN PGP SIGNATURE----- Version: GnuPG v1
iQIcBAEBAgAGBQJVgZyGAAoJEC78f/DUFuAUBWMP/AvqSfSMvzrlxCbNQYUnFJq+ zawx3x6nD2W67ogxq8KGc29F0B5hfWBFoCkooyKZBWtmSdVXgPUfSamZupeYAxUY sHeJSr0QjOWLTI7FcL646tp0FJI/f5ZzzqkFc8PPT5242/IpGBJIG80PHbaAtYeH w5pgjCP7hdUAujbXxa/VjIRJkTQBfj7YwbV7m7DuzL4OzUYEk3P3WejMDefwztcp 1Ws04rmuR2thcd+3M8GNNUkRVvGiXDuzJ+3QEcrwOZ3TwEvkEY9Mp883sVy5koRz QIWQD4AdYjz6zipIg/TrjLdRDwodwTwDiOl9orjvpPe9j/ExWkIYDqoVvjfHuezY jaLz5NOHOCNlTxuQ+neIh6mpNNKIPmZ03uWaY7Wl0GiEpRwJ7mTn25xPTwAHhb7Z PcuX2mVfEvA0ILZbrFvz+NpVIYZDtbygwDRJ95CQf3KUHxFd4F+rwIWo7hfDHh9p 9Op1qQFJ3brqeWcS0WjVfc0C4X9edetcuAbd+4PVVmoOY+8il2xRdUMMY85GcbUS HezotvwaMcdUKn/oC3AdTDZ6GVrb+EHcXWaz/mjZFV8nBXA8l9FnevUObvW9a5lp 0PPi+t4LI+NfQ/+7KNJ/6uRGFZCHT6Z7QbFjYvn2lKq0MYdH9feOvLVz5+fIkcPm wK0VQaUUTSM83VqW3oZC =A++N -----END PGP SIGNATURE-----
participants (2)
-
Clayton Keller
-
Michal Trojnara