SSL Certificate Signed Using Weak Hashing Algorithm - WS-3850-24XS

[GayanSamarakoon42284]

Hi all,

We have some Cisco ws-3850-24xs switches. As per one of the VA findings , the switches are using SSL certificates that are signed by a weak hashing algorithm. We are unable to get external CA to issue certificates. Please be kind enough to let me know what is the command to change hashing algorithm of the certificate.

Thank you,
Gayan

[Muhammad Awais Khan · Accepted solution]

Hi,

You can specify the cipher suite to use in https session to switch IP.

ip http secure-ciphersuite is the command, below is the example of it

ip http secure-ciphersuite 3des-ede-cbc-sha

[GayanSamarakoon42284]

Hi Muhammad,

Thank you for your prompt reply. 

Thank you,

Gayan

[Muhammad Awais Khan]

You are welcome @GayanSamarakoon42284