[JIRA] (JENKINS-57455) Jenkins is not exposing cipher for TLSv1.1 and TLS1

[saxenadeepakkumar@gmail.com (JIRA)]

deepak kumar updated an issue

Jenkins / JENKINS-57455 Jenkins is not exposing cipher for TLSv1.1 and TLS1 Change By: deepak kumar Summary: Jenkins is not exposing weak cipher for TLSv1.1 and TLS1 Add Comment

This message was sent by Atlassian Jira (v7.11.2#711002-sha1:fdc329d)

[saxenadeepakkumar@gmail.com (JIRA)]

deepak kumar updated an issue

Jenkins / JENKINS-57455 Jenkins is not exposing cipher for TLSv1.1 and TLS1 Change By: deepak kumar

Jenkins (2.164.1) is not exposing weak ciphers. We want to attach our jenkins instance to our VIP netscalar. But our netscalar does not support TLSv1.2 and we are getting only TLSv1.2 cipher. {code:java} // code placeholder ssl-enum-ciphers: |   TLSv1.0: No supported ciphers found |   TLSv1.1: No supported ciphers found |   TLSv1.2: |     ciphers: |       TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 - strong |       TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 - strong |       TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 - strong |       TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 - strong |       TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 - strong |       TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 - strong |       TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 - strong |       TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 - strong |     compressors: |       NULL {code} Please suggest, how can we introduce cipher for TLSv1.1 and TLSv1? Please help us, we are in blocking state. Thanksm

Add Comment

[o.v.nenashev@gmail.com (JIRA)]

Oleg Nenashev commented on JENKINS-57455

Re: Jenkins is not exposing cipher for TLSv1.1 and TLS1 As designed IMHO. We include only standard Ciphers from MINA SSHD, and TLS 1.1 ciphers are not offered there due to security reasons. It is possible to make ciphers configurable via system properties in https://github.com/jenkinsci/sshd-module/blob/d31495b398a02fca5b87d2aa332188f78a097052/src/main/java/org/jenkinsci/main/modules/sshd/SSHD.java#L44-L46 , I would be open to review and probably accept such patch

Add Comment

[saxenadeepakkumar@gmail.com (JIRA)]

deepak kumar commented on JENKINS-57455

Re: Jenkins is not exposing cipher for TLSv1.1 and TLS1

Thanks a lot Oleg Nenashev for looking into this. It would be great, if you can provide any patch for this (As we are blocked with this). I don't find any solution to enable TLSv1 cipher by setting any property.   Thanks in advance!

Add Comment

[o.v.nenashev@gmail.com (JIRA)]

Oleg Nenashev commented on JENKINS-57455

Re: Jenkins is not exposing cipher for TLSv1.1 and TLS1

Sorry, I have neither time nor interest to help with supporting obsolete and insecure TLS protocols. I can review pull requests from others, but I will not be working on a patch

Add Comment