Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SSL Medium Strength Cipher Suites Supported for port 10000 & 3376 #364

Open
bishnuroy opened this issue Mar 15, 2019 · 0 comments
Open

SSL Medium Strength Cipher Suites Supported for port 10000 & 3376 #364

bishnuroy opened this issue Mar 15, 2019 · 0 comments

Comments

@bishnuroy
Copy link

bishnuroy commented Mar 15, 2019

Docker version 18.09.1, build 4c52b90

Getting following Vulnerabilities please help us to fixe it.

SSL Medium Strength Cipher   Suites Supported | 3376 | Medium Strength Ciphers (> 64-bit and   < 112-bit key, or 3DES)        ECDHE-RSA-DES-CBC3-SHA         Kx=ECDH        Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1        DES-CBC3-SHA                 Kx=RSA         Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1     The fields above are :    {OpenSSL ciphername}   Kx={key exchange}   Au={authentication}   Enc={symmetric encryption method}   Mac={message authentication code}   {export flag}
-- | -- | --
SSL Medium Strength Cipher   Suites Supported | 10000 | Medium Strength   Ciphers (> 64-bit and < 112-bit key, or 3DES)      ECDHE-RSA-DES-CBC3-SHA       Kx=ECDH        Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1        DES-CBC3-SHA                 Kx=RSA         Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1     The fields above are :    {OpenSSL ciphername}   Kx={key exchange}   Au={authentication}   Enc={symmetric encryption method}   Mac={message authentication code}   {export flag}


Docker Config:

ExecStart=/usr/bin/dockerd  --tlsverify --tlscacert=/etc/docker/certs/ca.pem --tlscert=/etc/docker/certs/cert.pem --tlskey=/etc/docker/certs/key.pem -H tcp://0.0.0.0:2376 -H unix:///var/run/docker.sock --cluster-store=etcd://localhost:2379

Swarm Configuration:

 /usr/bin/docker run -t -d -p 3376:3376 \
        -v /etc/docker/certs:/etc/docker/certs \
        --net=host --name=swarm-manager \
        swarm:1.2.5 manage \
        -H :*.*.*.* \
        --tlsverify \
        --tlscacert=/etc/docker/certs/ca.pem \
        --tlscert=/etc/docker/certs/cert.pem \
        --tlskey=/etc/docker/certs/key.pem \
        --strategy spread \
        --replication --advertise=*.*.*.*:3376 \
        etcd://etcd_server:2379

How can i pass TLSVersion and Cipher Suite in swarm configuration ???????????

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant