HP NonStop SSL Reference Manual page 46

Speci-
RFC Algo Name
fier
192.13 TLS_ECDH_RSA_WITH_3DES
_EDE_CBC_SHA
192.14 TLS_ECDH_RSA_WITH_AES_
128_CBC_SHA
192.15 TLS_ECDH_RSA_WITH_AES_
256_CBC_SHA
192.16 TLS_ECDHE_RSA_WITH_NUL
L_SHA
192.17 TLS_ECDHE_RSA_WITH_RC4
_128_SHA
192.18 TLS_ECDHE_RSA_WITH_3DE
S_EDE_CBC_SHA
192.19 TLS_ECDHE_RSA_WITH_AES
_128_CBC_SHA
192.20 TLS_ECDHE_RSA_WITH_AES
_256_CBC_SHA
192.21 TLS_ECDH_anon_WITH_NULL
_SHA
TLS_ECDH_anon_WITH_RC4_
192.22
128_SHA
192.23 TLS_ECDH_anon_WITH_3DES
_EDE_CBC_SHA
192.24 TLS_ECDH_anon_WITH_AES_
128_CBC_SHA
192.25 TLS_ECDH_anon_WITH_AES_
256_CBC_SHA
Default
If omitted, NonStop SSL will use the high security ciphers and the RC4 ciphers, i.e. currently:
ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-
SHA:DHE-RSA-CAMELLIA256-SHA:DHE-DSS-CAMELLIA256-SHA:AECDH-AES256-SHA:ECDH-RSA-
AES256-SHA:ECDH-ECDSA-AES256-SHA:AES256-SHA:CAMELLIA256-SHA:ECDHE-RSA-DES-CBC3-
SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:AECDH-DES-
CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:DES-CBC3-SHA:DES-CBC3-
MD5:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-
SHA:DHE-RSA-CAMELLIA128-SHA:DHE-DSS-CAMELLIA128-SHA:AECDH-AES128-SHA:ECDH-RSA-
AES128-SHA:ECDH-ECDSA-AES128-SHA:AES128-SHA:CAMELLIA128-SHA:ECDHE-RSA-RC4-SHA:ECDHE-
ECDSA-RC4-SHA:AECDH-RC4-SHA:ECDH-RSA-RC4-SHA:ECDH-ECDSA-RC4-SHA:RC4-SHA:RC4-MD5:RC4-
MD5:EXP-RC4-MD5:EXP-RC4-MD5
Example
CIPHERSUITES 0.53,0.47
Considerations
•
Please note that the default CIPHERSUITES are subject to change in order to make sure that only the most
secure ciphers are used by default.
•
When running as an SSL client, CIPHERSUITES specifies the cipher suites that should be allowed in order of
preference (favorite choice first). During the SSL handshake, HP NonStop SSL will present the list of cipher
46 • Configuration
OpenSSL Name KEX
ECDH-RSA-DES- ECDH_RSA
CBC3-SHA
ECDH-RSA- ECDH_RSA
AES128-SHA
ECDH-RSA- ECDH_RSA
AES256-SHA
ECDHE-RSA-NULL- ECDHE_RSA
SHA
ECDHE-RSA-RC4- ECDHE_RSA
SHA
ECDHE-RSA-DES- ECDHE_RSA
CBC3-SHA
ECDHE-RSA- ECDHE_RSA
AES128-SHA
ECDHE-RSA- ECDHE_RSA
AES256-SHA
AECDH-NULL-SHA ECDH_anon
AECDH-RC4-SHA ECDH_anon
AECDH-DES-CBC3- ECDH_anon
SHA
AECDH-AES128- ECDH_anon
SHA
AECDH-AES256- ECDH_anon
SHA
Enc
3DES_EDE_CB
C
AES_128_CBC
AES_256_CBC
NULL
RC4_128
3DES_EDE_CB
C
AES_128_CBC
AES_256_CBC
NULL
RC4_128
3DES_EDE_CB
C
AES_128_CBC
AES_256_CBC
HP NonStop SSL Reference Manual
Mac
SHA
SHA
SHA
SHA
SHA
SHA
SHA
SHA
SHA
SHA
SHA
SHA
SHA