How to disable 3DES-CBC (short block sizes) in the NoMachine web server (nxhtd)
The NoMachine web server, nxhtd is based on Apache (e.g. nxd v. 5.3.9 is based on httpd-2.4.16).
It doesn't have the Triple-DES cipher disabled by default.
To disable 3DES-CBC for encrypting data traffic on HTTP over TSL (HTTPS):
1) Edit the NoMachine cloud.inc file, <installation directory>/etc/cloud.inc (e.g. on Linux /usr/NX/etc/cloud.inc)
and change this line from:
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP
to:
SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:!3DES
2) Then restart nxhtd to make this change effective:
nxserver --restart nxhtd
E.g. on Linux and Mac:
$ sudo /etc/NX/nxserver --restart nxhtd
IMPORTANT
3DES-CBC is disabled in nxhtd v. 6:
https://www.nomachine.com/FR08O03482
Disabling 3DES-CBC (short block sizes) in the NoMachine web server
