AnsweredAssumed Answered

How to remove RSA key exchange

Question asked by Leith Bade on Jun 22, 2014
Latest reply on Jun 24, 2014 by Rob_T

Reading that TLS 1.3 will remove RSA key exchange I tried to remove them from my server.

 

I put this as the OpenSSL cipher string:

EECDH+AESGCM:EDH+AESGCM:EECDH+AES:EDH+AES:-SSLv3:EECDH+AES:EDH+AES:!aNULL:!eNULL:!EXP:!DES:!3DES:!RC4:!MD5:!PSK:!SRP:!aDH:!DSS:!kRSA;

 

But SSL Labs shows it is still offering RSA key exchange. What is wrong?

 

I made sure to reboot the server too so I don't see what is going on.

Outcomes