Weak Ciphers accepted in Dell Openmange Server Administrator

Question

Does anyone know how I can disable weak SSL ciphers for the OMSA web site?  I can't seem to find anywhere in it's installation directory that specifies that.  I have this issue on both Windows/Linux.  Here's part of the output from my Nessus Scans.  I would like to mitigate this vulnerability if possible.   Here is the list of weak SSL ciphers supported by the remote server : Low Strength Ciphers (< 56-bit key) SSLv2 EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export SSLv3 EXP-RC2-CBC-MD5 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export EXP-RC4-MD5 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export The fields above are : {OpenSSL ciphername} Kx={key exchange} Au={authentication} Enc={symmetric encryption method} Mac={message authentication code} {export flag}

ejhonda · Answer

Same situation here.  It's disappointing to see Dell hasn't stepped up and taken ownership of this issue.

KeithInSac · Answer

You're answer is posted here. http://en.community.dell.com/support-forums/servers/f/177/t/18523153.aspx

KeithInSac · Answer

Your answer is posted here. http://en.community.dell.com/support-forums/servers/f/177/t/18523153.aspx

Nick.Garofalo · Answer

You're answer is posted here. http://en.community.dell.com/support-forums/servers/f/177/t/18523153.aspx Is the link expired? Something error occurs when opening the link.

Systems Management General

Was this post helpful?