SSL Weak Encryption Question - HP Management Agents

[CA924077]

Our security vulnerability scanning device has detected the following vulnerability on all of our servers with the HP Management Web Agents - over 600 thus far. This is found on the apache backend of the management agents on port 2381. Any ideas how to fix? Thanks much for your ideas and recommendations in advance. Assume the servers all have agents v7.10a.

SSL Server uses weak encryption vulnerability:

THREAT:
The Secure Socket Layer (SSL) protocol allows for secure communication between a client and a server.
SSL encryption ciphers are classified based on the encryption key length as follows:

HIGH - key length larger than 128 bits
MEDIUM - key length equal to 128 bits
LOW - key length smaller than 128 bits
Messages encrypted with LOW encryption ciphers are easy to decrypt. Commercial SSL servers should only support MEDIUM or HIGH strength ciphers to guarantee transaction security. SSL servers support a LOW grade cipher even though the client supports stronger ciphers.

IMPACT:
An attacker can exploit this vulnerability to decrypt secure communications without authorization.

SOLUTION:
Disable support for LOW encryption ciphers.
Typically, for Apache/mod_ssl, httpd.conf or ssl.conf should have the following lines:
SSLProtocol: -ALL +SSLv3 +TLSv1
SSLCipherSuite: ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM

RESULT:
CIPHER KEY-EXCHANGE AUTHENTICATION MAC ENCRYPTION(KEY-STRENGTH) GRADE

SSLv2 SELECTED THE FOLLOWING WEAK CIPHER
EXP-RC2-CBC-MD5 RSA(512) RSA MD5 RC2(40) LOW

SSLv3 SELECTED THE FOLLOWING WEAK CIPHER
EXP1024-RC4-SHA RSA(1024) RSA SHA1 RC4(56) LOW

TLSv1 SELECTED THE FOLLOWING WEAK CIPHER
EXP1024-RC4-SHA RSA(1024) RSA SHA1 RC4(56) LOW

[CA467151]

I would recommend posting this question (what operating system?) under the Management Software & System Tools category for the ITRC forums. There is a Insight Manager 7 forum as well as a Systems Insight Manager forum. You can also use the ITRC advanced search to find postings on this issue.

Management SW & System Tools forums:

http://forums1.itrc.hp.com/service/forums/familyhome.do?familyId=121

ITRC Advanced Forum Search:

http://forums1.itrc.hp.com/service/james/home.do?admit=716493758+1098121437568+28353475