Ciphers

Many ciphers are available on the TLS connection, which may be negotiated automatically.

Restrictions on the ciphers used however is applied in the software.

Both a deny list and allow list are utilized to enable certain ciphers and disable others.

The cipher must be present on the allow list and not present on the deny list in order to be included in the permitted cipher list.

If the deny list is not specified, only the allow list will be checked.

For best security, a combination of allow list and deny list is configured by default.

If the cipher is a match for both the deny list and allow list, the cipher will be excluded.

A full list of ciphers permitted will be logged at the time a connection is attempted.