Knowledge base

www-ciphers verified

Cipher list for the console

in the configuration this is a linewww-ciphers: !aNULL:!eNULL:!LOW:!SSLv2:!EXPORT:!EXPORT56:FIPS:MEDIUM:HIGH:@STRENGTH

OpenSSL cipher specification used on the console's TLS port.

Values

Values
OpenSSL cipher spec
Default
!aNULL:!eNULL:!LOW:!SSLv2:!EXPORT:!EXPORT56:FIPS:MEDIUM:HIGH:@STRENGTH · taken from the build
applying
restart required
where it can be set
in the config file · with a startup flag · as an environment variable

In detail

Ships with the same conservative list as the mail side — null, low-grade and export ciphers excluded, the rest ordered by strength. Nothing to do here unless a customer's audit demands a narrower set.