iso/org/dod/internet/private/enterprises/.171/.10/.139/.3/.1/.8/.19/.1/.4/sslServicePolicyTable/sslServicePolicyEntry/sslServicePolicyCipherSuites
sslServicePolicyCipherSuites
OBJECT-TYPE
1.3.6.1.4.1.171.10.139.3.1.8.19.1.4.3.1.2
Description
This object is to configure the cipher-suites list. This field is a bit mask, setting a bit indicates that the corresponding cipher-list will be involved in the server authentication. In the FIPS (American Security Standard Mode) Mode, Only the following cipher list should be supported. TLS_RSA_3DES_SHA1 TLS_ DHE_RSA_3DES_SHA1 TLS_RSA_WITH_AES_128_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLS_DHE_RSA_WITH_AES_128_CBC_SHA TLS_DHE_RSA_WITH_AES_256_CBC_SHA hence the default value in FIPS mode will be TLS_RSA_3DES_SHA1 | TLS_ DHE_RSA_3DES_SHA1 | TLS_RSA_WITH_AES_128_CBC_SHA | TLS_RSA_WITH_AES_256_CBC_SHA | TLS_DHE_RSA_WITH_AES_128_CBC_SHA | TLS_DHE_RSA_WITH_AES_256_CBC_SHA
Syntax
BITS{ rsa-null-md5(0), rsa-null-sha(1), rsa-des-sha(2), rsa-3des-sha(3), dh-rsa-des-sha(4), dh-rsa-3des-sha(5), rsa-exp1024-des-sha(6), rsa-with-aes-128-cbc-sha(7), rsa-with-aes-256-cbc-sha(8), dhe-rsa-with-aes-128-cbc-sha(9), dhe-rsa-with-aes-256-cbc-sha(10) }