AnsweredAssumed Answered

what does SSLYZE timeout for cipher suite mean?

Question asked by jweiler on Dec 18, 2014

We believe we have enabled the TLS 1.0 cipher suite on an Oracle http server but sslyze is showing the below message for each cipher in the suite -

 

 

* TLSV1 Cipher Suites:    
Undefined - An unexpected error happened:

 

SEED-SHA                           timeout - timed out              

RC4-SHA                            timeout - timed out     

....        

 

It seems to work fine with the others -

 

 

* TLSV1_2 Cipher Suites:

    
Server rejected all cipher suites.

  

  * TLSV1_1 Cipher  Suites:

 

Server rejected all cipher suites.

 

* SSLV3 Cipher Suites:

 

Preferred:                    

                   RC4-SHA       128 bits      HTTP 200  OK                      

 

Accepted:                      

                   RC4-SHA       128 bits      HTTP 200  OK                      

 

 

                 EDH-RSA-DES-CBC3-SHA       DH-1024 bits   112 bits      HTTP 200 OK       

  

Outcomes