SSL compatibility

Question

Level 1

9 points

Is macOS X El Capitan 10.11.6 compatible with SSL 3.0 or higher

iMac, OS X 10.11

Posted on Jul 11, 2019 7:23 AM

Reply

Answer 1

Level 10

241,043 points

In Terminal...

openssl version -a

CFNetwork SSL
Available for: Mac OS X v10.6.8 and later
Impact: An attacker may be able to decrypt data protected by SSL
Description: There are known attacks on the confidentiality of RC4. An attacker could force the use of RC4, even if the server preferred better ciphers, by blocking TLS 1.0 and higher connections until CFNetwork tried SSL 3.0, which only allows RC4. This issue was addressed by removing the fallback to SSL 3.0.

Reply