Setting the ciphers supported by a cluster

Last Updated : Jan 16, 2024 |

Prolog information

Metadata

Keywords:

You can set the ciphers supported by an Avaya Breeze® platform cluster using the asset-ciphers.sh script. This

Script options and parameters

The asset-ciphers.sh script can use the following options and parameters:

asset-ciphers [-l|--list][-y|--yes][-c|--set-ciphers '<new cipher string>'][-f|--use-fips-ciphers][-d|--use-default-ciphers]

where:

-l|--list = List the current cipher string use for SIP(S) and HTTP(S).
-y|--yes = Assume yes for service restart confirmation prompt.
-c|--set-ciphers = Set the new ciphers string using the values in the parameter '<new cipher string>' as follows: as follows:
- Enclose the list of ciphers in ' ' marks (single-quote marks).
- Separate each cipher in the string with a : (colon).
- You can prefix each cipher with one of the following:
  - ! = Permanently deleted the cipher from the supported ciphers. You cannot re-add a permanently deleted cipher.
  - - = Delete the cipher from the supported ciphers. You can add the cipher again by using the cipher name with no prefix.
  - + = Move the cipher to the end of the supported ciphers.
  - No prefix = Add the cipher. You cannot use this to add a cipher that was permanently deleted using the ! prefix.
-f|--use-fips-ciphers = Set FIPS compliant ciphers for both FIPS & non-FIPS mode.
-d|--use-default-ciphers = Set the out-of-the-box cipher string for both FIPS and non-FIPS mode.
-h|--help = Show the script help.

asset-ciphers -c 'ALL:!aNULL:!eNULL:!ADH:!3DES:!IDEA:!SEED:!CAMELLIA:!EXP:!RC4:!KRB5:+HIGH:+MEDIUM:-LOW:-SSLv2'
asset-ciphers -y -c 'FIPS:!3DES:!DSS:!kDH:!DHE:!PSK:!eNULL:!aNULL'
asset-ciphers -d
asset-ciphers -f -y
asset-ciphers -l

Send Feedback