[Question](08-03-2025) Weak Encryption (Weak Ciphers) sent by client (Screenshot)

General
1

What is the name of the domain?

cleintdomain.com

What is the error message?

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009) ECDH x25519 (eq. 3072 bits RSA) FS WEAK

What is the issue you’re encountering

Client’s IT team mentioned in email and requested us to fix this issue - “Due to Weak Encryption (Weak Ciphers) algorithms or keys can be easily cracked by attackers, compromising the confidentiality and integrity of sensitive data.”

What steps have you taken to resolve the issue?

We are asking g for help…thank you everyone!!

What are the steps to reproduce the issue?

Screenshot attached.

Screenshot of the error

Error-SSL.png
Error-SSL.png1000×667 203 KB

2

The easiest fix is to set Minimum TLS to 1.3:

The more difficult fix is to use Advanced Certificate Manager and Custom Cipher Suites. But, as you’ll see below, it’s a bit complex to set up:

1 Like
3

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.