nsSSL3ciphers

SSL encryption ciphers

Description

This multivalued attribute specifies the set of encryption ciphers Directory Server uses during SSL communications. The default value, all, does not mean all the supported SSL ciphers, as supported ciphers with NULL key length are removed from the list.

Entry DN

cn=encryption,cn=config

Valid Range

Ciphers shown as supportedSSLCiphers on the root DSE, or all

Default Value

all

Syntax

DirectoryString

Use the + symbol to enable or - symbol to disable ciphers, followed by the cipher identifier. Blank spaces are not allowed in the list of ciphers.

To enable all ciphers, except rsa_null_md5 which must be specifically called, you can specify all.

Example

nsSSL3ciphers: +RSA_NULL_MD5,+RC4_56_SHA,-RC4_56_SHA

Attributes

See attributes(5) for descriptions of the following attributes:

ATTRIBUTE TYPE	ATTRIBUTE VALUE
Availability	SUNWdsee7
Stability Level	Obsolete: Scheduled for removal after this release