Select Your Language

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation

  • Comments
  • SSL -ciphers issues

    Posted on

    Dear team,

    We are unable to resolve/download the content from the website.

    [root@H-CS-UA-EDRTST1 ~]# curl -O https://secureupdates.checkpoint.com/sbalinux/sbalinux-gpg-key.asc -x 172.22.8.134:8080
    % Total % Received % Xferd Average Speed Time Time Time Current
    Dload Upload Total Spent Left Speed
    0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
    curl: (60) SSL certificate problem: EE certificate key too weak
    More details here: https://curl.haxx.se/docs/sslcerts.html

    curl failed to verify the legitimacy of the server and therefore could not
    establish a secure connection to it. To learn more about this situation and
    how to fix it, please visit the web page mentioned above.
    [root@H-CS-UA-EDRTST1 ~]# curl -O https://s3.amazonaws.com/download.draios.com/DRAIOS-GPG-KEY.public -x 172.22.8.134:8080
    % Total % Received % Xferd Average Speed Time Time Time Current
    Dload Upload Total Spent Left Speed
    0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
    curl: (60) SSL certificate problem: EE certificate key too weak
    More details here: https://curl.haxx.se/docs/sslcerts.html

    curl failed to verify the legitimacy of the server and therefore could not
    establish a secure connection to it. To learn more about this situation and
    how to fix it, please visit the web page mentioned above.

    But when we use "--ciphers DEFAULT@SECLEVEL=1",
    We are able to download the public keys.

    [root@H-CS-UA-EDRTST1 ibcc]# curl -O https://secureupdates.checkpoint.com/sbalinux/sbalinux-gpg-key.asc -x 172.22.8.134:8080 --ciphers DEFAULT@SECLEVEL=1
    % Total % Received % Xferd Average Speed Time Time Time Current
    Dload Upload Total Spent Left Speed
    100 961 100 961 0 0 858 0 0:00:01 0:00:01 --:--:-- 859
    [root@H-CS-UA-EDRTST1 ibcc]# curl -O https://s3.amazonaws.com/download.draios.com/DRAIOS-GPG-KEY.public -x 172.22.8.134:8080 --ciphers DEFAULT@SECLEVEL=1
    % Total % Received % Xferd Average Speed Time Time Time Current
    Dload Upload Total Spent Left Speed
    100 1702 10 1702 0 0 1605 0 0:00:01 0:00:01 --:--:-- 1605
    This content is a preview of a link.secureupdates.checkpoint.com

    Can any one let us know if we can reduce the ciphers manually.

    by

    points

    Responses

    Red Hat LinkedIn YouTube Facebook X, formerly Twitter

    Quick Links

    Help

    Site Info

    Related Sites

    © 2026 Red Hat