On 23 September 2016 at 17:13, Scott Neugroschl <scot...@xypro.com> wrote:

> Hi,
>
>
>
> I’m afraid the man page on the conf file is not particularly clear.   I’m
> looking at mitigating CVE-2016-2183 (SWEET32), and am not sure how to
> disable the DES and 3DES suites in the conf file.
>
> Can someone give me a hand?
>
>
>

​You can't disable them in the openssl config file, you should do it in the
cipher suite configuration of the affected application.

Cheers

Rich.
​
-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users

Reply via email to