Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

Cannot disable Cipher TLS_RSA_WITH_AES_128_GCM_SHA256 or TLS_RSA_WITH_AES_256_GCM_SHA384

  • 4 回覆
  • 1 有這個問題
  • 1 次檢視
  • 最近回覆由 Reuben

Reuben
Reuben
more options

Hi there,

I'm trying to disable insecure ciphers in TLS 1.2 since 1.3 isn't widely supported yet.

I'm using this to determine whats secure: https://browserleaks.com/ssl

I cant find any option to disable these two ciphers:

0x009c TLS_RSA_WITH_AES_128_GCM_SHA256 0x009d TLS_RSA_WITH_AES_256_GCM_SHA384

Thanks :)

Hi there, I'm trying to disable insecure ciphers in TLS 1.2 since 1.3 isn't widely supported yet. I'm using this to determine whats secure: https://browserleaks.com/ssl I cant find any option to disable these two ciphers: 0x009c TLS_RSA_WITH_AES_128_GCM_SHA256 0x009d TLS_RSA_WITH_AES_256_GCM_SHA384 Thanks :)
附加的畫面擷圖

被選擇的解決方法

You can disable/enable those ciphers in about:config:

security.ssl3.rsa_aes_128_gcm_sha256 for TLS_RSA_WITH_AES_128_GCM_SHA256 and security.ssl3.rsa_aes_256_gcm_sha384 for TLS_RSA_WITH_AES_256_GCM_SHA384

This will only work in the latest version of Firefox.

從原來的回覆中察看解決方案 👍 1

所有回覆 (4)

Roland Tanglao
Roland Tanglao
  • Moderator
more options

Hi Reuben:

I personally don't know how to do this, but I've asked some developers to help!

And hopefully I'll be able to report back soon!

Cheers!

...Roland

Mike Kaply
Mike Kaply
  • Moderator
more options

選擇的解決方法

You can disable/enable those ciphers in about:config:

security.ssl3.rsa_aes_128_gcm_sha256 for TLS_RSA_WITH_AES_128_GCM_SHA256 and security.ssl3.rsa_aes_256_gcm_sha384 for TLS_RSA_WITH_AES_256_GCM_SHA384

This will only work in the latest version of Firefox.

Mike Kaply
Mike Kaply
  • Moderator
more options

For reference, those new preferences were added in this bug:

https://bugzilla.mozilla.org/show_bug.cgi?id=1638369

由 Mike Kaply 於 修改

Reuben
Reuben 提出問題者
more options

Thanks for that Mike.

Is this in the Beta/Nightly?

I cant seem to find it in the Win 10 standard release 78.0.2 (64-bit) or Dev edition 79.0b7 (64-bit)

EDIT: ignore me added the value in about:config and toggled to False worked. Does not appear if searched. Cheers, Reuben

由 Reuben 於 修改