Informix - Problem description
Problem IT22534 | Status: Closed |
CUSTOMER IS ABLE TO CONNECT TO INFORMIX SSL LISTENER WITH OPENSSL COMMAND USING -CIPHER "DES:3DES" | |
product: | |
INFORMIX SERVER / 5725A3900 / B70 - IDS 11.70 | |
Problem description: | |
To address the Sweet32: Birthday attacks, A fix was added to Informix to block clients from connecting to Informix using the DES/3DES cipher. However using a security tool it was found that you can still make a connection to Informix using openssl: openssl s_client -connect IP:port# -cipher "DES:3DES" -tls1_2 CONNECTED(00000003) depth=0 O = sample, CN = LDAP_Server verify error:num=18:self signed certificate verify return:1 depth=0 O = sample, CN = LDAP_Server verify return:1 --- .. .. .. | |
Problem Summary: | |
Local Fix: | |
Solution | |
Workaround | |
not known / see Local fix | |
Comment | |
This APAR is a duplicate of IT27589 | |
Timestamps | |
Date - problem reported : Date - problem closed : Date - last modified : | 25.09.2017 23.09.2019 08.10.2019 |
Problem solved at the following versions (IBM BugInfos) | |
Problem solved according to the fixlist(s) of the following version(s) |