# SSL\_CIPHER\_LIST RESET ciphers configured.

**URL:** <https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/13552>\
**Category:** Community Support\
**Tags:** imported, kdb-and-q\
**Created:** [February 3, 2023, 12:00am UTC](https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/13552 "2023-02-03T00:00:00Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![kpc](https://avatars.discourse-cdn.com/v4/letter/k/ad7895/32.png) [@kpc](https://forum.kx.com/u/kpc)\
**Post date:** [February 3, 2023, 12:00am UTC](https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/13552/1 "2023-02-03T00:00:00Z")

</div>

[https://learninghub.kx.com/forums/topic/ssl\_cipher\_list-reset-ciphers-configured](https://learninghub.kx.com/forums/topic/ssl_cipher_list-reset-ciphers-configured)

Hello Team

I wanted to remove weak ciphers configured using SSL\_CIPHER\_LIST to avoid vulnerabilities. I tried exporting the parameter using ( **SSL\_CIPHER\_LIST** ) getting same set of ciphers configured earlier post restart.

Can someone please help me?

&nbsp;

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![rocuinneagain](https://sea2.discourse-cdn.com/flex002/user_avatar/forum.kx.com/rocuinneagain/32/287_2.png) [@rocuinneagain](https://forum.kx.com/u/rocuinneagain)\
**Post date:** [March 14, 2023, 12:00am UTC](https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/13552/2 "2023-03-14T00:00:00Z")

</div>

Are all the ciphers you added available on the machine?

Are they all contained in:

```
/usr/bin/openssl ciphers -v
```

---

<div class="post-metadata">

**Author:** ![kpc](https://avatars.discourse-cdn.com/v4/letter/k/ad7895/32.png) [@kpc](https://forum.kx.com/u/kpc)\
**Post date:** [February 19, 2023, 12:00am UTC](https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/13552/3 "2023-02-19T00:00:00Z")

</div>

After updating Ciphers list with the one I have, I am getting error  
SSL routines:SSL\_CTX\_set\_cipher\_list:no cipher match:ssl\_lib.c:1383:  
'2023.02.19T20:28:44.616 failed to load TLS certificates

Could you please help me.

---

<div class="post-metadata">

**Author:** ![rocuinneagain](https://sea2.discourse-cdn.com/flex002/user_avatar/forum.kx.com/rocuinneagain/32/287_2.png) [@rocuinneagain](https://forum.kx.com/u/rocuinneagain)\
**Post date:** [February 3, 2023, 12:00am UTC](https://forum.kx.com/t/ssl-cipher-list-reset-ciphers-configured/13552/4 "2023-02-03T00:00:00Z")

</div>

I see 31 by default on my machine but exporting the variable I see I can control it down to 3

[https://code.kx.com/q/kb/ssl/#tls-cipher-list](https://code.kx.com/q/kb/ssl/#tls-cipher-list")

```
$ q KDB+ 4.0 2021.07.12 Copyright (C) 1993-2021 Kx Systems 
q)count ":" vs string (-26!)[]`SSL_CIPHER_LIST 
31 
$ export SSL_CIPHER_LIST="TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" $ 
q KDB+ 4.0 2021.07.12 Copyright (C) 1993-2021 Kx Systems 
q)count ":" vs string (-26!)[]`SSL_CIPHER_LIST 
3
```

Can you replicate this on your system?