1141985 - *.tu-berlin.de is RC4 only

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Tim Taubert [:ttaubert] (inactive)]

bash-4.3$ ./cipherscan www.tu-berlin.de
...
Target: www.tu-berlin.de:443

prio  ciphersuite  protocols  pfs_keysize
1     RC4-MD5      TLSv1
2     RC4-SHA      TLSv1

Certificate: trusted, 2048 bit, sha256WithRSAEncryption signature
TLS ticket lifetime hint: None
OCSP stapling: not supported
Server side cipher ordering

Comment 1

[:Cykesiopka]

In addition, https://www.ssllabs.com/ssltest/analyze.html?d=tu-berlin.de :
> TLS version intolerance 	TLS 1.1  TLS 1.2  TLS 1.3  TLS 1.98  TLS 2.98

This might be a good candidate for the wildcard list, based on the absurd amount of SAN entries in the cert.

Comment 2

[Yuhong Bao]

This one is actually tolerant when the record version is 0x0301.

Comment 3

[:Cykesiopka]

(In reply to Yuhong Bao from comment #2)
> This one is actually tolerant when the record version is 0x0301.

Hmm, indeed. Thanks!

Comment 4

[Masatoshi Kimura [:emk]]

Fixed. Now the site got A+!