title: SSL Medium Strength Cipher Suites Supported (SWEET32) - Nessus Plugin ID 42873
body: <p>I received the following error when I scan ubuntu 16.4 . on port 10250.</p>
  
  <pre><code># netstat -nltp | grep 10250
  </code></pre>
  
  <p>tcp6       0      0 :::10250                :::*                    LISTEN      849/kubelet      </p>
  
  <p>Anyidea how to fix this issue? </p>
  
  <p>Description</p>
  
  <p>The remote host supports the use of SSL ciphers that offer medium strength encryption. Nessus regards medium strength as any encryption that uses key lengths at least 64 bits and less than 112 bits, or else that uses the 3DES encryption suite.</p>
  
  <p>Note that it is considerably easier to circumvent medium strength encryption if the attacker is on the same physical network.</p>
  
  <p>Output from most recent scan</p>
  
  <p>Medium Strength Ciphers (> 64-bit and &lt; 112-bit key, or 3DES)</p>
  
  <pre><code>ECDHE-RSA-DES-CBC3-SHA       Kx=ECDH        Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1   
  DES-CBC3-SHA                 Kx=RSA         Au=RSA      Enc=3DES-CBC(168)        Mac=SHA1   
  </code></pre>
  
  <p>The fields above are :</p>
  
  <pre><code>{OpenSSL ciphername}
  Kx={key exchange}
  Au={authentication}
  Enc={symmetric encryption method}
  Mac={message authentication code}
  {export flag}
  </code></pre>
  
  <p>Solution
  Reconfigure the affected application if possible to avoid use of medium strength ciphers.</p>