# SSL\_CIPHER\_LIST RESET ciphers configured.

**URL:** <https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/12790>\
**Category:** Community Support\
**Tags:** kdb-and-q\
**Created:** [February 3, 2023, 10:40am UTC](https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/12790 "2023-02-03T10:40:00Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![KPC1](https://avatars.discourse-cdn.com/v4/letter/k/b2d939/32.png) [@KPC1](https://forum.kx.com/u/KPC1)\
**Post date:** [February 3, 2023, 10:40am UTC](https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/12790/1 "2023-02-03T10:40:00Z")

</div>

Hello Team

I wanted to remove weak ciphers configured using SSL\_CIPHER\_LIST to avoid vulnerabilities. I tried exporting the parameter using ( **SSL\_CIPHER\_LIST** ) getting same set of ciphers configured earlier post restart.

Can someone please help me?

&nbsp;

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![rocuinneagain1](https://avatars.discourse-cdn.com/v4/letter/r/fbc32d/32.png) [@rocuinneagain1](https://forum.kx.com/u/rocuinneagain1)\
**Post date:** [February 3, 2023, 12:57pm UTC](https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/12790/2 "2023-02-03T12:57:00Z")

</div>

I see 31 by default on my machine but exporting the variable I see I can control it down to 3

https://code.kx.com/q/kb/ssl/#tls-cipher-list&nbsp;

$ q KDB+ 4.0 2021.07.12 Copyright (C) 1993-2021 Kx Systems q)count “:” vs string (-26!)`SSL_CIPHER_LIST 31 $ export SSL_CIPHER_LIST="TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" $ q KDB+ 4.0 2021.07.12 Copyright (C) 1993-2021 Kx Systems q)count ":" vs string (-26!)[]`SSL\_CIPHER\_LIST 3

&nbsp;Can you replicate this on your system?

---

<div class="post-metadata">

**Author:** ![KPC1](https://avatars.discourse-cdn.com/v4/letter/k/b2d939/32.png) [@KPC1](https://forum.kx.com/u/KPC1)\
**Post date:** [February 19, 2023, 9:37am UTC](https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/12790/3 "2023-02-19T09:37:00Z")

</div>

After updating Ciphers list with the one I have, I am getting error&nbsp;  
SSL routines:SSL\_CTX\_set\_cipher\_list:no cipher match:ssl\_lib.c:1383:  
'2023.02.19T20:28:44.616 failed to load TLS certificates

Could you please help me.  
&nbsp;

---

<div class="post-metadata">

**Author:** ![rocuinneagain1](https://avatars.discourse-cdn.com/v4/letter/r/fbc32d/32.png) [@rocuinneagain1](https://forum.kx.com/u/rocuinneagain1)\
**Post date:** [March 14, 2023, 4:41pm UTC](https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/12790/4 "2023-03-14T16:41:00Z")

</div>

Are all the ciphers you added available on the machine?

Are they all contained in:

```
/usr/bin/openssl ciphers -v

```