SSL -ciphers issues
Dear team,
We are unable to resolve/download the content from the website.
[root@H-CS-UA-EDRTST1 ~]# curl -O https://secureupdates.checkpoint.com/sbalinux/sbalinux-gpg-key.asc -x 172.22.8.134:8080
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
curl: (60) SSL certificate problem: EE certificate key too weak
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
[root@H-CS-UA-EDRTST1 ~]# curl -O https://s3.amazonaws.com/download.draios.com/DRAIOS-GPG-KEY.public -x 172.22.8.134:8080
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0
curl: (60) SSL certificate problem: EE certificate key too weak
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
But when we use "--ciphers DEFAULT@SECLEVEL=1",
We are able to download the public keys.
[root@H-CS-UA-EDRTST1 ibcc]# curl -O https://secureupdates.checkpoint.com/sbalinux/sbalinux-gpg-key.asc -x 172.22.8.134:8080 --ciphers DEFAULT@SECLEVEL=1
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 961 100 961 0 0 858 0 0:00:01 0:00:01 --:--:-- 859
[root@H-CS-UA-EDRTST1 ibcc]# curl -O https://s3.amazonaws.com/download.draios.com/DRAIOS-GPG-KEY.public -x 172.22.8.134:8080 --ciphers DEFAULT@SECLEVEL=1
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 1702 10 1702 0 0 1605 0 0:00:01 0:00:01 --:--:-- 1605
This content is a preview of a link.secureupdates.checkpoint.com
Can any one let us know if we can reduce the ciphers manually.
Responses