1

I am trying to use only the strongest ciper suite available, from the documentation I tried:

SSLCipherSuite HIGH:!aNULL:!MD5

But the browser says that it is obsolete:

enter image description here

What is the strongest one available at the moment?

2

THE strongest is perhaps not well determined. But Chrome wants to see something like TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, i.e. the cipher suite has to use DHE or ECDHE and AES in Galois Counter Mode.

Alternatively you can use CHACHA20_POLY1305 as the symmetric algorithm.

1

IETF recommends the cipher suites

  • TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
  • TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

in RFC-7525 section 4.2 as of May 2015, which I would say are a good choice.

However, the EC variants almost always use the NIST curves (secp256r1, secp384r1, secp521r1) which are subject to speculations as described here.

0

Note that the strongest available cipher suite is not determined by Apache Httpd; it is dependent on the version of openssl (or any other ssl implementation) or your operating system. There are still operating systems coming with "oldstable" openssl-0.9.8 :-(

  • True in general, but OP's Chrome screenshot shows TLS1.2 which can only happen for OpenSSL 1.0.1 and up -- and all of those include AESGCM (though not CHACHA/POLY) and ECDHE. Although RedHat (and CentOS etc) packages of OpenSSL until about a year ago disabled all ECC including ECDHE. ECDHE must also be enabled by by the app level (httpd) setting parameters, but to my understanding 2.4 does have this. – dave_thompson_085 Dec 27 '15 at 0:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.