Recommended Settings (default)

#Crypto-Agility - Communications

eftlinkserver.json configuration file

#Protocols Secure setting

"protocolsAllowList": ["TLSv1.3", "TLSv1.2"]

#Cipher Secure setting

"cipherAllowList": [

"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",

"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",

"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",

"TLS_AES_128_GCM_SHA256",

"TLS_AES_256_GCM_SHA384",

"TLS_CHACHA20_POLY1305_SHA256",

"TLS_AES_128_CCM_SHA256",

"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",

"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",

"TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256",

"TLS_ECDHE_ECDSA_WITH_AES_256_CCM",

"TLS_ECDHE_ECDSA_WITH_AES_128_CCM"

],

"cipherDenyList": [

"SSL_.*",

"TLS_EMPTY_.*",

".*_SHA",

".*_3DES_.*",

".*_DES_.*",

".*_WITH_NULL_.*",

".*_anon_.*",

".*EXPORT.*",

".*LOW.*",

".*MD5.*",

".*DES.*",

".*RC2.*",

".*RC4.*",

".*PSK.*",

"TLS_DH_.*",

"TLS_DHE_.*"

]

Please note that any changes on default values need to be reflected on the optional eftlinkclient.json configuration file use on Xstore data folder.

Similar configurations are available for EFTLinkConfig.properties for TCP Socket Mode as ProtocolWhiteList, CipherWhiteList and CipherBlackList.

Please consult the EFTLink Framework Configuration guide for more details.