www-ciphers verified
Cipher list for the console
in the configuration this is a line
www-ciphers: !aNULL:!eNULL:!LOW:!SSLv2:!EXPORT:!EXPORT56:FIPS:MEDIUM:HIGH:@STRENGTHOpenSSL cipher specification used on the console's TLS port.
Values
- Values
OpenSSL cipher spec- Default
!aNULL:!eNULL:!LOW:!SSLv2:!EXPORT:!EXPORT56:FIPS:MEDIUM:HIGH:@STRENGTH · taken from the build- applying
restart required- where it can be set
in the config file · with a startup flag · as an environment variable
In detail
Ships with the same conservative list as the mail side — null, low-grade and export ciphers excluded, the rest ordered by strength. Nothing to do here unless a customer's audit demands a narrower set.