Status in source: current.
Names: sslCipherList
Technical details
{
"smi_kind": "OBJECT-TYPE",
"definition": [
"sslCipherList",
"OBJECT-TYPE",
"SYNTAX",
"Integer32",
"MAX-ACCESS",
"read-write",
"STATUS",
"current",
"DESCRIPTION",
"\"This object is used to configure the cipher-suites list. This field is a bit mask, setting a bit indicates that the corresponding cipher-list will be involved in the server authentication. BIT 0 - RSA-NULL-MD5 BIT 1 - RSA-NULL-SHA BIT 2 - RSA-DES-SHA BIT 3 - RSA-3DES-SHA BIT 4 - DH-RSA-DES-SHA BIT 5 - DH-RSA-3DES-SHA BIT 6 - RSA-EXP1024-DES-SHA BIT 7 - RSA-WITH-AES-128-CBC-SHA BIT 8 - RSA-WITH-AES-256-CBC-SHA BIT 9 - DHE-RSA-WITH-AES-128-CBC-SHA BIT 10 - DHE-RSA-WITH-AES-256-CBC-SHA BIT 11 - ECDHE_RSA_WITH_AES_256_GCM_SHA384 BIT 12 - ECDHE_RSA_WITH_CHACHA20_POLY1305 BIT 13 - ECDHE_RSA_WITH_AES_128_GCM_SHA256 BIT 14 - ECDHE_RSA_WITH_AES_256_SHA384 BIT 15 - ECDHE_RSA_WITH_AES_128_SHA256 BIT 16 - TLS_AES_128_GCM_SHA256 BIT 17 - TLS_AES_256_GCM_SHA384 BIT 18 - TLS_CHACHA20_POLY1305_SHA256 Note:BIT 0 - Least significant bit BIT 10 - Most significant bit For example,setting the cipher list to the value - 001 0101, will include RSA-NULL-MD5, RSA-DES-SHAa and DH-RSA-DES-SHA as cipher-list for authentication. In the FIPS (American Security Standard Mode) Mode, Only the following cipher list should be supported. TLS_RSA_3DES_SHA1 TLS_ DHE_RSA_3DES_SHA1 TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA hence the default value in FIPS mode will be TLS_RSA_3DES_SHA1 | TLS_ DHE_RSA_3DES_SHA1 | TLS_RSA_WITH_AES_128_CBC_SHA | TLS_RSA_WITH_AES_256_CBC_SHA | TLS_DHE_RSA_WITH_AES_128_CBC_SHA | TLS_DHE_RSA_WITH_AES_256_CBC_SHA. From 2.1, only the following ciphers are supported: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_SHA384 TLS_ECDHE_RSA_WITH_AES_128_SHA256 From 5.1 the following ciphers were added: TLS_AES_128_GCM_SHA256 TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 hence the default value will be TLS_AES_128_GCM_SHA256 | TLS_AES_256_GCM_SHA384 | TLS_CHACHA20_POLY1305_SHA256\"",
"DEFVAL",
"{",
"458752",
"}",
"::=",
"{",
"sslCiphers",
"1",
"}"
],
"syntax_tree": [
[
"SimpleSyntax",
"Integer32"
],
null,
[
"MaxAccessPart",
"read-write"
],
[
"Status",
"current"
],
[
"DESCRIPTION",
"This object is used to configure the cipher-suites list. This field is a bit mask, setting a bit indicates that the corresponding cipher-list will be involved in the server authentication. BIT 0 - RSA-NULL-MD5 BIT 1 - RSA-NULL-SHA BIT 2 - RSA-DES-SHA BIT 3 - RSA-3DES-SHA BIT 4 - DH-RSA-DES-SHA BIT 5 - DH-RSA-3DES-SHA BIT 6 - RSA-EXP1024-DES-SHA BIT 7 - RSA-WITH-AES-128-CBC-SHA BIT 8 - RSA-WITH-AES-256-CBC-SHA BIT 9 - DHE-RSA-WITH-AES-128-CBC-SHA BIT 10 - DHE-RSA-WITH-AES-256-CBC-SHA BIT 11 - ECDHE_RSA_WITH_AES_256_GCM_SHA384 BIT 12 - ECDHE_RSA_WITH_CHACHA20_POLY1305 BIT 13 - ECDHE_RSA_WITH_AES_128_GCM_SHA256 BIT 14 - ECDHE_RSA_WITH_AES_256_SHA384 BIT 15 - ECDHE_RSA_WITH_AES_128_SHA256 BIT 16 - TLS_AES_128_GCM_SHA256 BIT 17 - TLS_AES_256_GCM_SHA384 BIT 18 - TLS_CHACHA20_POLY1305_SHA256 Note:BIT 0 - Least significant bit BIT 10 - Most significant bit For example,setting the cipher list to the value - 001 0101, will include RSA-NULL-MD5, RSA-DES-SHAa and DH-RSA-DES-SHA as cipher-list for authentication. In the FIPS (American Security Standard Mode) Mode, Only the following cipher list should be supported. TLS_RSA_3DES_SHA1 TLS_ DHE_RSA_3DES_SHA1 TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA hence the default value in FIPS mode will be TLS_RSA_3DES_SHA1 | TLS_ DHE_RSA_3DES_SHA1 | TLS_RSA_WITH_AES_128_CBC_SHA | TLS_RSA_WITH_AES_256_CBC_SHA | TLS_DHE_RSA_WITH_AES_128_CBC_SHA | TLS_DHE_RSA_WITH_AES_256_CBC_SHA. From 2.1, only the following ciphers are supported: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 TLS_ECDHE_RSA_WITH_AES_256_SHA384 TLS_ECDHE_RSA_WITH_AES_128_SHA256 From 5.1 the following ciphers were added: TLS_AES_128_GCM_SHA256 TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 hence the default value will be TLS_AES_128_GCM_SHA256 | TLS_AES_256_GCM_SHA384 | TLS_CHACHA20_POLY1305_SHA256"
],
null,
null,
null,
[
"DEFVAL",
458752
]
]
}