TLS/SSL Server Supports The Use of Static Key Ciphers - Negotiated with the insecure cipher suites

Support
1

Problem: TLS/SSL Server Supports The Use of Static Key Ciphers
*
Negotiated with the following insecure cipher suites:
* TLS 1.2 ciphers:
* TLS_RSA_WITH_AES_128_CBC_SHA
* TLS_RSA_WITH_AES_128_CBC_SHA256
* TLS_RSA_WITH_AES_128_GCM_SHA256
* TLS_RSA_WITH_AES_256_CBC_SHA
* TLS_RSA_WITH_AES_256_CBC_SHA256
* TLS_RSA_WITH_AES_256_GCM_SHA384

Expected outcome: Insecure cipher suites are disabled.

Foreman and Proxy versions: foreman-3.2.0-1, foreman-proxy-3.2.0-1

Foreman and Proxy plugin versions: katello-4.4.0-1

Distribution and version: Red Hat Enterprise Linux release 8.6 (Ootpa)

Other relevant data:

Please help me disabling the insecure ciphers suites…

  • TLS 1.2 ciphers:
    * TLS_RSA_WITH_AES_128_CBC_SHA
    * TLS_RSA_WITH_AES_128_CBC_SHA256
    * TLS_RSA_WITH_AES_128_GCM_SHA256
    * TLS_RSA_WITH_AES_256_CBC_SHA
    * TLS_RSA_WITH_AES_256_CBC_SHA256
    * TLS_RSA_WITH_AES_256_GCM_SHA384

Best regards,
Balaji Sankaran.

2

I resolved it by disabling TLS 1.1, TLS 1.2 and enabled only TLS 1.3.