Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The testing tool tells me that my server is offering/supporting:

SSL_DHE_RSA_WITH_DES_CBC_SHA (0x15) DH 1024 bits (p: 128, g: 128, Ys: 128) FS WEAK 56

At least these two weak ciphers. I'd like to support only strong ciphers. I've tried specifying

ssl.cipher-list = "HIGH:MEDIUM:!ADH"

But that has not helped. How do I tell lighthttpd not to use weak ciphers for SSL?

If I can also address "Forward Secrecy (Experimental) No NOT DESIRABLE" at the same time, great.

share|improve this question
up vote 4 down vote accepted

Finally, here is the ultimate "secret sauce":

Pass the SSL Labs Test on Lighttpd (Mitigate the CRIME and BEAST attack, Disable SSLv2 and Enable Perfect Forward Secrecy).

Please read the link for concrete configuration directives.

share|improve this answer
Welcome to SuperUser! Could you please add the relevant details from the link to your post? This helps the site avoid "link rot" in the long-term: – Excellll Aug 16 '13 at 13:34
From the above post: ssl.cipher-list = "AES256+EECDH:AES256+EDH:!aNULL:!eNULL" – jmuc Oct 15 '14 at 7:21

For a general approach/tutorial on how to build the right cipher suite config you might like to have a look here:

However, the author did not seem to pay attention to implementing DHE cipher suites; you will need these DHE ciphers in order to allow Forward Secrecy (FS) for your SSL connection.

For a 'ready-to-take cipher suite config' including DHE please have a look here. Seems that this config has also been tested to work with a few browser and OS setups:

PS: please note that the message "Forward Secrecy (Experimental) No NOT DESIRABLE" from SSLlabs seems to show up no matter if FS is working or not with your connection, so for the time being don't bother too much about that message.

share|improve this answer
The secret sauce a few links away was: ssl.honor-cipher-order = "enable" ssl.cipher-list = "ECDHE-RSA-AES256-SHA384:AES256-SHA256:RC4-SHA:RC4:HIGH:!MD5:!aNULL:!EDH:!AESGCM‌​" – arantius Aug 15 '13 at 16:42

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .