External Cipher Suites

When an SSL connection is initialized, the client and server determine a common cipher value to be used for key exchange and encryption. Various cipher values offer different types of encryption algorithms and levels of security.

Note: When using elliptic curves, the curve nistp384/secp384r1 will be used.

All the TLS versions between the lowest checked version and the highest checked version will be supported.

Supported Protocols

Label

Mandatory

Description

TLS v1.3

 

When selected, the TLS v1.3 protocol is supported.

Selected by default.

TLS v1.2

 

When selected, the TLS v1.2 protocol is supported.

Selected by default.

TLS v1.1

 

When selected, the TLS v1.1 protocol is supported.

Not selected by default.

TLS v1.0

 

When selected, the TLS v1.0 protocol is supported.

Not Selected by default.

Cipher Suites

Label

Mandatory

Description

Cipher Suites – Supported

 

Supported by default:

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

TLS_RSA_WITH_CAMELLIA_256_CBC_SHA

TLS_RSA_WITH_AES_256_CBC_SHA256

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

TLS_AES_256_GCM_SHA384

TLS_CHACHA20_POLY1305_SHA256

TLS_AES_128_GCM_SHA256

Cipher Suites – Not Supported

 

Not supported by default:

SSSL_CK_RC4_64_WITH_MD5

SSL_CK_DES_64_CBC_WITH_MD5

SSL_CK_RC2_128_CBC_EXPORT40_WITH_MD5

SSL_CK_RC4_128_EXPORT40_WITH_MD5

SSSL_CK_DES_192_EDE3_CBC_WITH_MD5

SSL_CK_RC2_128_CBC_WITH_MD5

SSL_CK_RC4_128_WITH_MD5

TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA

TLS_RSA_EXPORT1024_WITH_RC2_CBC_56_MD5

TLS_DHE_RSA_WITH_DES_CBC_SHA

TLS_RSA_EXPORT1024_WITH_RC4_56_SHA

TLS_RSA_EXPORT1024_WITH_RC4_56_MD5

TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA

TTLS_DHE_RSA_WITH_AES_256_CBC_SHA

TLS_DHE_RSA_WITH_AES_128_CBC_SHA

TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA

TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA

TLS_DHE_RSA_WITH_AES_128_CBC_SHA256

TLS_DHE_RSA_WITH_AES_256_CBC_SHA256

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384

TLS_RSA_WITH_AES_256_CBC_SHA

TLS_RSA_WITH_AES_256_GCM_SHA384

TLS_RSA_WITH_AES_128_CBC_SHA

TLS_RSA_WITH_AES_128_CBC_SHA256

TLS_RSA_WITH_AES_128_GCM_SHA256

TLS_AES_128_CCM_8_SHA256

TLS_AES_128_CCM_SHA256