AnsweredAssumed Answered

Caching of Ciphers in SSL Server Test

Question asked by David Woods on Dec 2, 2015

Hi

 

Is there any sort of caching taking place on the cipher list in the SSL Server Test tool?

 

I have made changes to my web server to make sure all weak and broken ciphers are removed.  If I scan the server with nmap

 

nmap -sT -PN -p 443 xxx.xxx.xxx.xxx --script ssl-enum-ciphers.nse

...the cipher is no longer listed. however the SSL Server Test still lists the cipher and gives my site an F rating

 

An example is "TLS_RSA_WITH_RC4_128_MD5 (0x4)   INSECURE"


I have used the "Clear Cache" link


Thanks

 

Dave

Outcomes