Re: [Unity-idm-discuss] disabledCipherSuites Parameter

[Krzysztof B. <go...@ic...>]

Hi again,

W dniu 31.07.2015 o 14:07, Sander Apweiler pisze:
> Hi all,
>
> i Want to Disable some SSL Ciphers in unity and set the following
> parameter in unityServer.conf:
>
> unityServer.core.httpServer.disabledCipherSuites=ECDHE-RSA-RC4-SHA
> RC4-MD5 RC4-SHA
>
> After restart the server still uses ECDHE-RSA-RC4-SHA cipher. Are there
> some additional steps to do than restart?

Ahh, I didn't read your config line carefully enough. You have used 
Openssl names of ciphers. You have to use Java cipher names. You can 
find them here:

http://docs.oracle.com/javase/8/docs/technotes/guides/security/SunProviders.html#SUNProvider
(search for Cipher Suites)

So you need something like TLS_ECDHE_RSA_WITH_RC4_128_SHA or 
TLS_ECDHE_ECDSA_WITH_RC4_128_SHA

Best,
Krzysztof