Cipher hardening not working

[fritex]

@jaltmann

SSLLabs still report weak ciphers

Concerned about below highlighted ones?

@jaltmann

receive response back with correct ciphers from API.

Mind asking which source did you used to sent the API request?

Helpful post:

How can we disable weak ciphers

I’ve had cases where legacy TLS has become active. A support ticket indicated to drop the minimum TLS and raise it again to redeploy if this happens. (Turn it off and on again!) Even with minimum TLS set to TLS v1.2 there are some ciphers that would be considered weak. I use ACM with this API call to disable ciphers I don’t need: curl -s -X PATCH "https://api.cloudflare.com/client/v4/zones/${zoneid}/settings/ciphers" -H "X-Auth-Email: ${auth_email}" -H "X-Auth-Key: ${auth_key}" -H "Content-Ty…

Article for reset and use API for Legacy in case you haven’t tried yet, otherwise as the articles states to use Advanced Certificate Manager. Please, consider that TLSv1.2 is still used, therefrom don’t disable it’s ciphers:

Customize cipher suites · Cloudflare SSL/TLS docs

Source:

Cipher suites · Cloudflare SSL/TLS docs