More cipher fields in certifcates
06 May 2024
Again some new fields are added to certificates:
- cipherorder_sslv3
- cipherorder_tlsv1
- cipherorder_tlsv1_1
- cipherorder_tlsv1_2
- cipherorder_tlsv1_3
You can use these to build queries like this one, which finds all certificates on servers that still support RC4 ciphers:
index=certificates cipherorder_sslv3=*RC4* OR
cipherorder_tlsv1=*RC4* OR cipherorder_tlsv1_1=*RC4* OR
cipherorder_tlsv1_2=*RC4* OR cipherorder_tlsv1_3=*RC4*