I have Linux servers, which was reported by IT security team having various obsolete ciphers, and I need to disable them and replace with newer versions if they used by applications. However I stumble, that I can't even find these ciphers. How to do it? For example how to figure out where and what using some ciphers below (actual list is much bigger)?
TLSv1.1: ciphers: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 1024) - A TLSv1.2: ciphers: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A
I used command to list all the ciphers, but it didn't return me ciphers which was listed:
$ openssl ciphers -v | column -t
Linux version of servers with ciphers above:
$uname -r 2.6.32-718.104.22.168.4.el6.x86_64
Disclaimer: I'm new at UNIX.