Re: [Unity-idm-discuss] disabledCipherSuites Parameter

[Sander A. <sa....@fz...>]

Hi Krzysztof,

my problem is solved. Thank you very much. Maybe there could be a short
notice in the documentation.

Best regards,
Sander

On Di, 2015-08-04 at 18:37 +0200, Krzysztof Benedyczak wrote:
> Hi again,
>
> W dniu 31.07.2015 o 14:07, Sander Apweiler pisze:
> > Hi all,
> >
> > i Want to Disable some SSL Ciphers in unity and set the following
> > parameter in unityServer.conf:
> >
> > unityServer.core.httpServer.disabledCipherSuites=ECDHE-RSA-RC4-SHA
> > RC4-MD5 RC4-SHA
> >
> > After restart the server still uses ECDHE-RSA-RC4-SHA cipher. Are there
> > some additional steps to do than restart?
>
> Ahh, I didn't read your config line carefully enough. You have used
> Openssl names of ciphers. You have to use Java cipher names. You can
> find them here:
>
> http://docs.oracle.com/javase/8/docs/technotes/guides/security/SunProviders.html#SUNProvider
> (search for Cipher Suites)
>
> So you need something like TLS_ECDHE_RSA_WITH_RC4_128_SHA or
> TLS_ECDHE_ECDSA_WITH_RC4_128_SHA
>
> Best,
> Krzysztof




------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------
Forschungszentrum Juelich GmbH
52425 Juelich
Sitz der Gesellschaft: Juelich
Eingetragen im Handelsregister des Amtsgerichts Dueren Nr. HR B 3498
Vorsitzender des Aufsichtsrats: MinDir Dr. Karl Eugen Huthmacher
Geschaeftsfuehrung: Prof. Dr.-Ing. Wolfgang Marquardt (Vorsitzender),
Karsten Beneke (stellv. Vorsitzender), Prof. Dr.-Ing. Harald Bolt,
Prof. Dr. Sebastian M. Schmidt
------------------------------------------------------------------------------------------------
------------------------------------------------------------------------------------------------