Vulnerable cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (SWEET32) still exist

[D592]

Vulnerable cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (SWEET32) still exist - could the VPN developers share any information how to fix the issue

Prerequisites

• [yes] Can you reproduce?
• [yes] Are you running the latest version of SoftEtherVPN?

SoftEther version: 4.43
Component: Server
Operating system: Linux
Architecture: 64 bit

Description

Vulnerable cipher TLS_RSA_WITH_3DES_EDE_CBC_SHA (SWEET32)

Expected behavior: not using of that cipher

Actual behavior: using of that cipher

Steps to reproduce

1. checking the listen 443 port with network vulnerability scanner

[drasco]

Wait till you find out the user can simply elect not to encrypt at all