Cipher hardening not working

General
1

What is the name of the domain?

multiple

What is the issue you’re encountering

Not receiving a support response from Cloudflare

What steps have you taken to resolve the issue?

Contacted support, support lack of response after two weeks.

What are the steps to reproduce the issue?

Hardened ciphers according to API and receive response back with correct ciphers from API. Sites like SSLLabs still report weak ciphers.

2

Any change you can provide one of the affect domains for testing?

2 Likes
3

Hello, the specific domain we’re testing with is firstbusiness.com

4

Concerned about below highlighted ones? :thinking:

slika
slika940×520 32.7 KB

Mind asking which source did you used to sent the API request? :thinking:

Helpful post:

Article for reset and use API for Legacy in case you haven’t tried yet, otherwise as the articles states to use Advanced Certificate Manager. Please, consider that TLSv1.2 is still used, therefrom don’t disable it’s ciphers:

Source:

5

That is essentially what I followed for the API calls. Here’s the results from PowerShell using a GET for ciphers from the domain:

$response.result.value
ECDHE-ECDSA-AES128-GCM-SHA256
ECDHE-ECDSA-CHACHA20-POLY1305
ECDHE-RSA-AES128-GCM-SHA256
ECDHE-RSA-CHACHA20-POLY1305
ECDHE-ECDSA-AES256-GCM-SHA384
ECDHE-RSA-AES256-GCM-SHA384

According to the API response, these are the only ciphers enabled.

6

This domain is not proxied at this time.

1 Like
7

That was it, I didn’t even look for the proxying setting and completely missed that. Thank you!

1 Like
8

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.