I would like to enable export cipher suites in Apache for the purpose of testing out some old vulnerabilities. I haven't been successful thus far, and would greatly appreciate some assistance.
My setup is as follows:
Apache and mod_ssl 2.2.15 OpenSSL 1.0.1a
As far as I am aware, the above versions are old enough to "support" these older cipher suites.
Here is the relevant lines from
SSLprotocol all SSLCipherSuite DEFAULT:+EXP
I believe the above is all that is necessary to enable export cipher suites, however running the
ssl-enum-ciphers.se script does not show any EXP cipher suites. Changing the
SSLCipherSuite to something like "LOW" does take effect. I did restart the
httpd service after making the changes.
I have also confirmed this by running
openssl s_client -connect 127.0.0.1:443 -cipher EXPORT, to which I receive a
sslv3 alert handshake failure which does indeed suggest the export cipher suites have not been enabled.
What am I missing here?