1. Release Notes
  2. Caveats, Known Issues, and Limitations
  3. Caveats

Caveats

The following items describe caveats in the P-CZ3.0.0 release.

ECB Sync Compatibility

ECB Sync is supported only between nodes with similar platforms. For example, a mix of X3/X5/X7 is supported, but not a VM and X7.

Deprecated Ciphers

The system deprecates the following ciphers, adhering to recent OpenSSL changes intended to eliminate weak ciphers:
  • All DES-CBC ciphers, including:
    • TLS_DHE_RSA_WITH_DES_CBC_SHA
    • TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA
The user should remove any prior version configuration that used these ciphers, and not configure a security profile with the expectation that these ciphers are available. Note also that TLS profiles using the ALL (default) value to the cipher-list parameter no longer use these ciphers.

Note:

Your version of the ACLI may still print these ciphers when you run cipher-list ?. Despite printing them in ACLI output, the system does not support them within service operations.