dbTalk Databases Forums  

SSL Chipers

comp.databases.oracle.server comp.databases.oracle.server


Discuss SSL Chipers in the comp.databases.oracle.server forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
jkells
 
Posts: n/a

Default SSL Chipers - 10-27-2011 , 01:16 PM






I'm sure that this is not the group to inquire about ciphers being
greater then 256 for PostgreSQL but if anyone can provide me with any
information about PostgreSQL support for chipers and how to use chipers
greater then 256 (I.e. 1024) I would greatly appreciate it.
I have two Ubuntu servers running PostgreSQL and when I setup SSL I was
surprised to see it only at 256. Looking at openssl chipers the largest
one was 256.

psql (9.0.4)
SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)
Type "help" for help.

openssl ciphers -v 'AES+HIGH'
ADH-AES256-SHA SSLv3 Kx=DH Au=None Enc=AES(256) Mac=SHA1

Isn't 256 considered weak now a days?
Thanks

Reply With Quote
  #2  
Old   
Gerard H. Pille
 
Posts: n/a

Default Re: SSL Ciphers (was Chipers) - 10-29-2011 , 06:58 AM






jkells wrote:
Quote:
I'm sure that this is not the group to inquire about ciphers being
greater then 256 for PostgreSQL but if anyone can provide me with any
information about PostgreSQL support for chipers and how to use chipers
greater then 256 (I.e. 1024) I would greatly appreciate it.
I have two Ubuntu servers running PostgreSQL and when I setup SSL I was
surprised to see it only at 256. Looking at openssl chipers the largest
one was 256.

psql (9.0.4)
SSL connection (cipher: DHE-RSA-AES256-SHA, bits: 256)
Type "help" for help.

openssl ciphers -v 'AES+HIGH'
ADH-AES256-SHA SSLv3 Kx=DH Au=None Enc=AES(256) Mac=SHA1

Isn't 256 considered weak now a days?
Thanks
Maybe you could Google for "ciphers" iso "chipers" and have better results.

First hit for "openssl ciphers"

# default 512-bit key, sent to standard output
openssl genrsa

# 1024-bit key, saved to file named mykey.pem
openssl genrsa -out mykey.pem 1024

# same as above, but encrypted with a passphrase
openssl genrsa -des3 -out mykey.pem 1024

Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.