Penetration test complains about weak cipher