ssl - cipher suite specs using TLSv1.2 only and no SSLv3 TLSv1.2:!aNULL:!eNULL -


when using vpn-like connection between 2 servers (not web servers or it), besides authentication enable encryption.

the authentication portion working, wanted @ encryption level.

i know tlsv1.2 , v1.1 supported alongside wih sslv3.

i use tlsv1.2 , nothing else.

tlsv1.2:!anull:!enull

is the correct cipher suite use?

information https://www.openssl.org/docs/manmaster/apps/ciphers.html seems not helpful...

can this matter?

i use tlsv1.2 , nothing else.

if want use tls 1.2 have configure protocol , not ciphers. limiting ciphers tls 1.2 ciphers drops support ciphers available since ssl 3.0 , still supported tls 1.2. depending on peer might end no shared ciphers way.

if still want restrict ciphers might try string tlsv1.2:!anull:!enull. make use ciphers newly introduced in tls 1.2 , implicitly enforce protocol. again, no guarantee server supports these ciphers if server can tls 1.2 protocol.


Comments

Popular posts from this blog

java - Jasper subreport showing only one entry from the JSON data source when embedded in the Title band -

serialization - Convert Any type in scala to Array[Byte] and back -

SonarQube Plugin for Jenkins does not find SonarQube Scanner executable -