Oracle^® ZFS Storage Appliance Administration Guide, Release OS8.7.x

Configuring SSL/TLS (CLI)

To configure SSL/TLS versions and ciphers, use the following steps. The versions and at least one of the ciphers must be identical on all appliances that communicate with each other.

1. Go to configuration settings peer and enter ls to list the SSL/TLS versions and ciphers.

   The list of ciphers varies per the versions selected.

2. Enter the SSL/TLS versions using command set tls_version and the version name.

   hostname:configuration settings peer> set tls_version=TLSv1.2
                   tls_version = TLSv1.2 (uncommitted)

3. Enter the ciphers using command set ciphers and the cipher names, separated by commas.

   hostname:configuration settings peer> set 
   ciphers=AES128-GCM-SHA256,ECDH-ECDSA-AES128-GCM-SHA256
                   ciphers = 
   AES128-GCM-SHA256,ECDH-ECDSA-AES128-GCM-SHA256 (uncommitted)

4. Enter commit. To view the versions and ciphers, enter show.

   hostname:configuration settings peer> commit
   hostname:configuration settings peer> show
   Properties:
                   tls_version = TLSv1.2
                       ciphers =
   AES128-GCM-SHA256:ECDH-ECDSA-AES128-GCM-SHA256
   hostname:configuration settings peer>