How to enable weak ciphers in stunnel - stunnel-users

14 Nov 2014


      When I run stunnel, I would like to enable the weaker ciphers and
protocols (SSLv3) for testing purposes.
However, adding options to the stunnel.conf file doesn't seem to return
new ciphers during the negotiation (using sslscan to generate the
report).
I have look through the documentation and it doesn't seem to address
these options very well.
Thanks,
glenn
options = SSLv2
;;ciphers = DH+AES
;;ciphers = HIGH:LOW
;;ciphers = HIGH:MEDIUM
ciphers = ALL
Supported Server Cipher(s):
Accepted  TLSv1  256 bits  DHE-RSA-AES256-SHA
Accepted  TLSv1  256 bits  AES256-SHA
Accepted  TLSv1  128 bits  DHE-RSA-AES128-SHA
Accepted  TLSv1  128 bits  AES128-SHA
Accepted  TLSv1  168 bits  EDH-RSA-DES-CBC3-SHA
Accepted  TLSv1   56 bits  EDH-RSA-DES-CBC-SHA
Accepted  TLSv1  168 bits  DES-CBC3-SHA
Accepted  TLSv1   56 bits  DES-CBC-SHA
Accepted  TLSv1  128 bits  IDEA-CBC-SHA
Accepted  TLSv1  128 bits  RC4-SHA
Accepted  TLSv1  128 bits  RC4-MD5
Prefered Server Cipher(s):
TLSv1  256 bits  DHE-RSA-AES256-SHA
________________________________
This message may contain confidential information.  If you are not the intended recipient of this e-mail, do not disseminate, distribute or copy this e-mail and delete this e-mail from your system.