topic Re: SSL Ciphers List in Network Security

SSL Ciphers List

jefmartins1208 — Tue, 12 Mar 2019 13:59:24 GMT

Hello,

I bought an ASA5506-X, and I am not able to access ASDM.

SSL Error: ERR_SSL_VERSION_OR_CIPHER_MISMATCH

I use command

show ssl ciphers all

and show only those two.

DES-CBC-SHA, NULL-SHA

How to add others?

slicerpro — Mon, 24 Sep 2018 21:02:38 GMT

You are lacking all the cipher suites. fix this by the command:

"ssl encryption 3des-sha1 aes128-sha1 aes256-sha1"

..without the quote marks of course.

jefmartins1208 — Mon, 24 Sep 2018 21:04:33 GMT

It does not work, command is deprecated.

slicerpro — Mon, 24 Sep 2018 21:09:10 GMT

Wasn't sure which version you were on, but beginning 9.3(2), 'ssl encryption' command was deprecated, try 'ssl cipher' instead.

jefmartins1208 — Mon, 24 Sep 2018 21:20:29 GMT

It is in version 9.8. I tried to use the ssl cipher and put a different option from the previous ones it does not support.

slicerpro — Tue, 25 Sep 2018 15:23:52 GMT

What is the output of "show run all ssl" ?

Marvin Rhoads — Tue, 25 Sep 2018 16:52:33 GMT

It most likely wasn't ordered with the (free) 3DES-AES license. (i.e., the ordering SKU ended with K8 instead of K9)

Check via "show activation-key".

If indeed you don't have that license, go to software.cisco.com and get one.