Forum Discussion

RayThomsen_7557's avatar
RayThomsen_7557
Icon for Nimbostratus rankNimbostratus
Jan 09, 2015
Solved

SSL Profile !EXPORT excludes what exactly?

Okay I found this page:

 

https://support.f5.com/kb/en-us/solutions/public/13000/100/sol13171.html

 

which tells me that !EXPORT will exclude "EXPORT grade (weak) ciphers" but I can't find a list of what that includes. Is there a list available?

 

application delivery
LTM
  • Vitaliy_Savrans's avatar
    Vitaliy_Savrans
    Jan 09, 2015

    Hi,the list of export ciphers:

     tmm --clientciphers EXPORT

       ID  SUITE                            BITS PROT    METHOD  CIPHER  MAC     KEYX
 0:   100  EXP1024-RC4-SHA                   56  SSL3    Native  RC4     SHA     RSA
 1:   100  EXP1024-RC4-SHA                   56  TLS1    Native  RC4     SHA     RSA
 2:    98  EXP1024-DES-CBC-SHA               56  SSL3    Native  DES     SHA     RSA
 3:    98  EXP1024-DES-CBC-SHA               56  TLS1    Native  DES     SHA     RSA
 4:    98  EXP1024-DES-CBC-SHA               56  DTLS1   Native  DES     SHA     RSA
 5:     3  EXP-RC4-MD5                       40  SSL3    Native  RC4     MD5     RSA
 6:     3  EXP-RC4-MD5                       40  TLS1    Native  RC4     MD5     RSA
 7:     8  EXP-DES-CBC-SHA                   40  SSL3    Native  DES     SHA     RSA
 8:     8  EXP-DES-CBC-SHA                   40  TLS1    Native  DES     SHA     RSA 
 9:     8  EXP-DES-CBC-SHA                   40  DTLS1   Native  DES     SHA     RSA

2 Replies

Sort By
  • Vitaliy_Savrans's avatar
    Vitaliy_Savrans
    Icon for Nacreous rankNacreous
    Jan 09, 2015

    Hi,the list of export ciphers:

     tmm --clientciphers EXPORT

       ID  SUITE                            BITS PROT    METHOD  CIPHER  MAC     KEYX
 0:   100  EXP1024-RC4-SHA                   56  SSL3    Native  RC4     SHA     RSA
 1:   100  EXP1024-RC4-SHA                   56  TLS1    Native  RC4     SHA     RSA
 2:    98  EXP1024-DES-CBC-SHA               56  SSL3    Native  DES     SHA     RSA
 3:    98  EXP1024-DES-CBC-SHA               56  TLS1    Native  DES     SHA     RSA
 4:    98  EXP1024-DES-CBC-SHA               56  DTLS1   Native  DES     SHA     RSA
 5:     3  EXP-RC4-MD5                       40  SSL3    Native  RC4     MD5     RSA
 6:     3  EXP-RC4-MD5                       40  TLS1    Native  RC4     MD5     RSA
 7:     8  EXP-DES-CBC-SHA                   40  SSL3    Native  DES     SHA     RSA
 8:     8  EXP-DES-CBC-SHA                   40  TLS1    Native  DES     SHA     RSA 
 9:     8  EXP-DES-CBC-SHA                   40  DTLS1   Native  DES     SHA     RSA