Ppa and default-bind-ciphers


 
Thread Tools Search this Thread
Top Forums UNIX for Beginners Questions & Answers Ppa and default-bind-ciphers
# 1  
Old 04-27-2019
Ppa and default-bind-ciphers

Hello,
I am under ubuntu 16.04 now. I am going to add a repository into server.
After apt-get install app_name, I see below lines inside a file :

excerpted from config file:
Code:
	
..
..
ssl-default-bind-ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256::RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS
..
..

I'd like to know what it means.
Do you think that it might cause a security issue at my end?

Thank you
Boris
# 2  
Old 04-27-2019
Did your installation go as planned?

Why mask out the name of the file you installed?
# 3  
Old 04-27-2019
Hello Neo,
No problem, haproxy

thank you
Boris
# 4  
Old 04-27-2019
Thanks but did your install go as planned with no errors?

In other words, did haproxy install OK?
# 5  
Old 04-27-2019
I #'d that line.
It's okay with installation

Thank you
Boris
# 6  
Old 04-27-2019
Thanks... so what's the problem ?

Are you concerned about the apt config or the haproxy config?

You should try to be specific so we do not have to become mind readers to understand your post Smilie

I use apt all the time and this issue has never come up in apt.
# 7  
Old 04-27-2019
Normally I have no problem with installation as I did the same before but it was a question in my mind.
My question: What is the function of the line which I removed?


Thank you
Boris
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Bind

Hi All I need to do bind of exiting filesystem to new storage allocated mount --bind /prod/OpenCSS /var/lib/test echo "/prod/OpenCSS /var/lib/pgsql bind bind 0 0" >> /etc/fstab will this command just work ? (2 Replies)
Discussion started by: anil529
2 Replies

2. Linux

Postfix: Enable only high ciphers

I try to enable only secure high ciphers. With those smtpd_tls_auth_only = yes smtpd_tls_mandatory_ciphers = high smtpd_tls_protocols = SSLv3, TLSv1, !SSLv2 smtpd_tls_mandatory_exclude_ciphers = aNULL Disable sslv2 but nessus say weak and medium ciphers still enabled,how to enable only... (0 Replies)
Discussion started by: Linusolaradm1
0 Replies

3. UNIX for Dummies Questions & Answers

Can't bind to IP

When you get the message can't bind to ip already in use. is there a command to search to see everything that is using that IP? I've already check the host and hostname files (2 Replies)
Discussion started by: mchelle_99
2 Replies

4. Cybersecurity

SSH ciphers help

Hello, One of my co-worker changed our the ssh ciphers that we currently use. We made a change to /etc/ssh/ssh_config on our Solaris 10 servers. Security said that we have to use aes128-ctr or higher, but not aes128-cbc. The issue is that many of the ssh clients (Tectia) on Windows will not... (0 Replies)
Discussion started by: bitlord
0 Replies

5. Cybersecurity

How to Disable Ciphers and Reconfigure Encryption?

Hello, I recently had a Retina scan of my system and there are some findings I do not understand. SSL Week Cipher Strength Supported - Retina has detected that the targeted SSL Service supports a cryptographically weak cipher strength... Disable ciphers that support less than 128-bit... (4 Replies)
Discussion started by: stringman
4 Replies

6. OS X (Apple)

Weak Security Ciphers

Hi All * Need some help on testing if a server supports weak ciphers . Here is the command I ran : openssl s_client -connect HOSTNAME:443 -cipher LOW:EXP result : Connected : err num=110 openssl s_client -connect HOSTNAME:8000 -cipher LOW:EXP result : Connected : err... (1 Reply)
Discussion started by: noufel
1 Replies

7. Cybersecurity

Weak Security Ciphers

Hi All * Need some help on testing if a server supports weak ciphers . Here is the command I ran : openssl s_client -connect HOSTNAME:443 -cipher LOW:EXP result : Connected : err num=110 openssl s_client -connect HOSTNAME:8000 -cipher LOW:EXP result : Connected : err... (0 Replies)
Discussion started by: noufel
0 Replies

8. Red Hat

NFS - IP bind

Hello, Our production linux server have multiple network interface. Recently we installed and started NFS. Now the client server cannot mount to the server running NFS. Later it was discovered that the port being used for NFS is only bound to one IP address, which is not the IP address I... (0 Replies)
Discussion started by: hemangjani
0 Replies
Login or Register to Ask a Question