Default cipher list doesn't include ECDHE-RSA-AES128-GCM-SHA256

[noxxi]

Default cipher list doesn't include ECDHE-RSA-AES128-GCM-SHA256

[noxxi]

Hi,

I've updated the default ciphers in IO::Socket::SSL version 2.026 based on what current browsers do and based on the recommendations of Mozilla. This also includes support for ECDHE-RSA-AES128-GCM-SHA256 now.

Apart from that I find the very restricted configuration of www.tiremoni.com questionable: they offer only a very few (4) ciphers (why?) but among these are ciphers which combine GCM with DHE even though all clients which can do GCM can do the much better ECDHE too. On top of that they use a weak DH key. Thus I don't think that somebody actually knew what (s)he was doing when setting up this site and in this case one should expect problems with non-standard clients.

[brewt]

I have several sample hosts are using the same cipher suites. It's a bit strange that they all happen to be from different German web hosts, but they're all running nginx. Perhaps this is a common nginx configuration?

[noxxi]

Perhaps this is a common nginx configuration?

I doubt that. But people tend to copy errors from others because they don't really understand the issues themselves.

A typical error is trying to disable SSL 3.0 not by setting the protocol (i.e. ssl_protocols) but by disabling all SSLv3 ciphers. Unfortunately this includes also all the ciphers used with TLS 1.0 and TLS 1.1 and most of the ciphers used with TLS 1.2 and leaves only the ciphers which were newly introduced with TLS 1.2.