Applications Systems

Cipher error after applying RC4 third-party SSL certificate

Information and recommendation for resolving the Cipher error received after applying a RC4 third-party SSL certificate.

First published date

10/15/2018 9:42 PM

Last published date

4/15/2019 3:14 PM

Overview

This article provides information and recommendation for the Cipher error after applying a RC4 third-party SSL certificate.

Product section

Virtualization Manager

Cause

This issue is related to a JAVA vulnerability with RC4 Cipher suite. RC4 Cipher Suite is considered a weak Cipher algorithm by industry standards and was removed in JAVA version 1.8.0_60 and above.

To read more, click here (© 2017 Blancco Technology Group, available at https://support.blancco.com, obtained on November 13, 2018).

If you generated a certificate using RC4 Cipher algorithm, this will cause the Cipher error when accessing VMAN via SSL (port 8443). See sample error below:

cmmq0015 uses an unsupported protocol

ERR_SSL_VERSION_OR_CIPHER_MISMATCH

VMAN 6.3.1 JAVA version does not support RC4 Cipher suite as per the JAVA.

Resolution

Generate a certificate that VMAN Cipher suite supports. See the following list of Cipher suites supported:

<value>TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256</value>
<value>TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384</value>
<value>TLS_DHE_RSA_WITH_AES_128_GCM_SHA256</value>
<value>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256</value>
<value>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA</value>
<value>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384</value>
<value>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA</value>
<value>TLS_DHE_RSA_WITH_AES_128_CBC_SHA256</value>
<value>TLS_DHE_RSA_WITH_AES_128_CBC_SHA</value>
<value>TLS_DHE_RSA_WITH_AES_256_CBC_SHA256</value>
<value>TLS_DHE_RSA_WITH_AES_256_CBC_SHA</value>

Note: A simple RSA_SHA (SHA256withRSA) is supported and commonly used.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third party content at your own risk, and you will be solely responsible for the incorporation of the same, if any.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.