SSLCIPHERSUITES

The SSLCIPHERSUITES configuration setting defines one or more cipher suites to use for negotiating the security settings for a network connection when Essbase is in secure mode (TLS/SSL protocol).

Syntax

SSLCIPHERSUITES ciphersuite_1[,ciphersuite_2,...,ciphersuite_6]

At least one cipher suite is required. A comma-delimited list of cipher suites, in order by preference, is supported. The first cipher suite in the list has the highest priority.

Description

You can change the default cipher suite by changing the order. The following is the default order.

TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA, 
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256, 
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, 
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384, 
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, 
TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, 
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, 
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, 
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, 
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, 
SSL_RSA_WITH_3DES_EDE_CBC_SHA, 
TLS_RSA_WITH_AES_128_CBC_SHA, 
TLS_RSA_WITH_AES_128_CBC_SHA256, 
TLS_RSA_WITH_AES_128_GCM_SHA256, 
TLS_RSA_WITH_AES_256_CBC_SHA, 
TLS_RSA_WITH_AES_256_CBC_SHA256, 
TLS_RSA_WITH_AES_256_GCM_SHA384

Note:

For the highest level of security, reverse the order in which these cipher suites are listed.

Example

SSLCIPHERSUITES SSL_RSA_WITH_3DES_EDE_CBC_MD5,SSL_RSA_WITH_DES_CBC_SHA