Netscape DIRECTORY SERVER 6.01 Configuration Manual page 83

For domestic versions, any combination of the following:
Valid Range
rsa_null_md5
rsa_rc4_128_md5
rsa_rc4_40_md5
rsa_rc2_40_md5
rsa_des_sha
rsa_fips_des_sha
rsa_3des_sha
rsa_fips_3des_sha
tls_rsa_export1024_with_rc4_56_sha
tls_rsa_export1024_with_des_cbc_sha
N/A
Default Value
DirectoryString
Syntax
+ symbol to enable or - symbol to disable followed by the cipher(s). It is
important to note that blank spaces are not allowed in the list of ciphers.
To enable all ciphers (except rsa_null_md5 which must be specifically
called) you can specify +all.
Example
nsslapd-SSL3ciphers:
+RSA_NULL_MD5,+RC4_56_SHA,-RC4_56_SHA
If you are using the Directory Server Console to set the cipher preferences, the
values on the SSL 3.0 tab of the Cipher Preference dialog box correspond to the
following:
Table 2-2 SSLv3 Ciphers
Cipher in Console
None
RC4
RC4 (Export)
RC2(Export)
For SSLv3
For TLS
Corresponding SSLv3 Cipher
rsa_null_md5
rsa_rc4_128_md5
rsa_rc4_40_md5
rsa_rc2_40_md5
Chapter 2
Core Server Configuration Attributes Reference
Core Server Configuration Reference 83