Join Airheads
Log in to use Airheads Agent
Airheads Agent is an early-release version of a generative AI search tool to aid your search of the Airheads Community.
I wonder if that's the thing. The self signed cert just won't cut it if you're trying to limit the cipher suites.
No, local MS AD CA issued certificate -- spgsitsupport --
self-signed cert?
I get this: display ssl server-policy Total number of SSL server policies: 1 SSL server policy: domain-ssl PKI domain: domain Ciphersuites: RSA AES 128 CBC SHA RSA AES 256 CBC SHA DHE RSA AES 128 CBC SHA DHE RSA AES 256 CBC SHA RSA AES 128 CBC SHA256 RSA AES 256 CBC...
I also tried, cause why not, switching out the policies to match that which is displayed when no ssl server policy is applied. IE [code] [HP-BuildRoom-24]display ssl server-policy Total number of SSL server policies: 1 SSL server policy: examplepolicyfromhp PKI domain: Ciphersuites: ...
And what is your certificate? Is it ECDHE ? -- spgsitsupport --
Just the self-signed cert created by the switch. I've been wondering if the self-signed cert is the issue but have not been able to figure out anyway to regenerate a new one.
With no policy applied I get this [code] Host is up (0.0010s latency). PORT STATE SERVICE 443/tcp open https | ssl-enum-ciphers: | TLSv1.2: | ciphers: | TLS DHE RSA WITH AES 128 CBC SHA (dh 1024) - A | TLS DHE RSA WITH AES 128 CBC SHA256 (dh 1024) - A | TLS DHE RSA WITH AES 256...
What what does nmap show? nmap --script ssl-enum-ciphers -p 443 host IP or DNS -- spgsitsupport --
@jmpk I've followed what you've listed above, however, no matter what ciphersuites I select, once I apply the server policy to HTTPS, I get a "This site can't provide a secure connection uses an unsupported protocol. ERR SSL VERSION OR CIPHER MISMATCH Unsupported protocol The client and...