|
|
Description:
|
sslServicePolicyCipherSuites OBJECT-TYPE
SYNTAX BITS {rsa-null-md5(0), rsa-null-sha(1), rsa-des-sha(2), rsa-3des-sha(3), dh-rsa-des-sha(4), dh-rsa-3des-sha(5), rsa-exp1024-des-sha(6), rsa-with-aes-128-cbc-sha(7), rsa-with-aes-256-cbc-sha(8), dhe-rsa-with-aes-128-cbc-sha(9), dhe-rsa-with-aes-256-cbc-sha(10)}
MAX-ACCESS read-write
STATUS current
DESCRIPTION
"This object is to configure the cipher-suites list.
This field is a bit mask, setting a bit indicates that the corresponding cipher-list will be involved in the server authentication.
In the FIPS (American Security Standard Mode) Mode, Only the following cipher list should be supported.
TLS-RSA-3DES-SHA1
TLS- DHE-RSA-3DES-SHA1
TLS-RSA-WITH-AES-128-CBC-SHA
TLS-RSA-WITH-AES-256-CBC-SHA
TLS-DHE-RSA-WITH-AES-128-CBC-SHA
TLS-DHE-RSA-WITH-AES-256-CBC-SHA
hence the default value in FIPS mode will be TLS-RSA-3DES-SHA1 | TLS- DHE-RSA-3DES-SHA1 | TLS-RSA-WITH-AES-128-CBC-SHA | TLS-RSA-WITH-AES-256-CBC-SHA | TLS-DHE-RSA-WITH-AES-128-CBC-SHA | TLS-DHE-RSA-WITH-AES-256-CBC-SHA"
|
|
|
|
