Freitag, 27. Mai 2016

IBM Domino and TLS - Part 3 - How To fix your trust & security issues






"The Server accepts the RC4 cipher, which is weak"
You can define the ciphers used/supported by a Domino Server using the .ini - Parameter "SSLCipherSpec=" following hexcodes describing ciphers. Here you will find some examples.
Since 9.0.1.3 you don't have to define specific ciphers. All weak ciphers were deactivated by default.

"There is no Support for secure renegotiation"
Use the .ini-Parameter "SSL_DISABLE_RENEGOTIATE=1"