How to control ciphers used by SSL?

stan stanb at panix.com
Wed Jan 22 17:41:20 UTC 2020


On Wed, Jan 22, 2020 at 05:53:12PM +0100, Liam Proven wrote:
> On Wed, 22 Jan 2020 at 16:45, stan <stanb at panix.com> wrote:
> >
> > We are in the process of upgrading a machine that is quite old. One of the
> > major tasks performed by this machine is supporting a fair number of
> > MikroTi's.
> 
> Typo?
> 
> Do you mean MikroTik  routers?

Yes, sorry.
> 
> 
> > This is done by connecting to these devices using a perl module
> > MikroTik::API . When we run the perl script on the newer (18.04) machine,
> > it fails to connect. We believe this is because the ciphers available on
> > the devices are not being used by the newer openssl layer.
> >
> > Does this make sense?
> >
> > If so, how can we add the older ciphers to the list that the SSL layer
> > offers from the Ubuntu machine.
> >
> > FYI, this is on an internal network, so we are not overly concerned about
> > the use of older ciphers.
> >
> > This is done by connecting to a specific port on the devices, not the ssh
> > or https ports.
> 
> You might need to be a bit more specific.
> 
> It works from older versions, you say? But not on 18.04. So, on what
> older versions does it work? Then you need to isolate what versions of
> openssh work and what don't
> 
> -- 
> Liam Proven - Profile: https://about.me/liamproven
> Email: lproven at cix.co.uk - Google Mail/Hangouts/Plus: lproven at gmail.com
> Twitter/Facebook/Flickr: lproven - Skype/LinkedIn: liamproven
> UK: +44 7939-087884 - ??R (+ WhatsApp/Telegram/Signal): +420 702 829 053
> 
> -- 
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users

-- 
"They that would give up essential liberty for temporary safety deserve
neither liberty nor safety."
						-- Benjamin Franklin




More information about the ubuntu-users mailing list