[SD-81171] Asset Explorer Agent doesn't support TLS_ECDHE_* ciphers for TLS 1.2 connections
I have, through trial and error, determined that the ManageEngine Asset Explorer agent generated via Admin > Discovery > Windows Agent Configuration on ServiceDesk Plus version 11.1 11116 does not support any ciphers that use an elliptic curve diffie hellman ephemeral key agreement protocol for TLS 1.2 connections.
As this will improve the security of the agent by giving access to better ciphers, is there any current or planned support for ECDHE by the agent?
I was unable to test whether or not it is supported, but if elliptic curve digital signature algorithm (ECDSA) is not supported either, then for performance reasons this should also be supported.
eg.
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
I note that these ciphers are supported for SSL access to ServiceDesk Plus itself so hopefully it's not too hard to add support to the agent.