HP NonStop SSL User Manual

HP NonStop SSL Reference Manual Configuration • 43
• The first file on the list must contain a certificate signing the given server certificate. Subsequent files must
contain certificates that sign the previous certificate in the list.
• During SSL handshake, the certificate chain will be sent along with the client or server certificate to the SSL
communication partner
• If a value of * is used for CACERTS, it will be assumed that the client or server certificate is self-signed.
• A CA certificate for testing purposes is delivered as CACERT file on the HP NonStop SSL installation
subvolume to enable quick start installation. This test CA certificate signs the test server certificate contained in
SERVCERT or CLIENTCERT.
See also
SERVCERT, CLIENTCERT, SSLCOM SSLINFO, SSLCOM RELOAD CERTIFICATES
CIPHERSUITES
Use this parameter to specify which cipher suites are admissible for a HP NonStop SSL process.
Parameter Syntax
CIPHERSUITES suite [, suite, ...]
Arguments
suite
specifies a cipher suite. Currently the following cipher suites can be explicitly configured:
Speci-
fier
RFC Algo Name OpenSSL Name KEX Enc Mac
0.1 TLS_RSA_WITH_NULL_MD5 NULL-MD5 RSA NULL MD5
0.2 TLS_RSA_WITH_NULL_SHA NULL-SHA RSA NULL SHA
0.3
TLS_RSA_EXPORT_WITH_RC
4_40_MD5
EXP-RC4-MD5 RSA_EXPORT RC4_40 MD5
0.4
TLS_RSA_WITH_RC4_128_M
D5
RC4-MD5 RSA RC4_128 MD5
0.5
TLS_RSA_WITH_RC4_128_SH
A
RC4-SHA RSA RC4_128 SHA
0.6
TLS_RSA_EXPORT_WITH_RC
2_CBC_40_MD5
EXP-RC2-CBC-MD5 RSA_EXPORT RC2_CBC_40 MD5
0.7
TLS_RSA_WITH_IDEA_CBC_
SHA
IDEA-CBC-SHA RSA IDEA_CBC SHA
0.8
TLS_RSA_EXPORT_WITH_DE
S40_CBC_SHA
EXP-DES-CBC-SHA RSA_EXPORT DES40_CBC SHA
0.9
TLS_RSA_WITH_DES_CBC_S
HA
DES-CBC-SHA RSA DES_CBC SHA
0.10
TLS_RSA_WITH_3DES_EDE_
CBC_SHA
DES-CBC3-SHA RSA
3DES_EDE_CB
C
SHA
0.17
TLS_DHE_DSS_EXPORT_WIT
H_DES40_CBC_SHA
EXP-EDH-DSS-DES-
CBC-SHA
DHE_DSS_EXP
ORT
DES40_CBC SHA
0.18
TLS_DHE_DSS_WITH_DES_C
BC_SHA
EDH-DSS-DES-
CBC-SHA
DHE_DSS DES_CBC SHA
0.19
TLS_DHE_DSS_WITH_3DES_
EDE_CBC_SHA
EDH-DSS-DES-
CBC3-SHA
DHE_DSS
3DES_EDE_CB
C
SHA
0.20
TLS_DHE_RSA_EXPORT_WIT EXP-EDH-RSA- DHE_RSA_EXP
DES40_CBC SHA

HP NonStop SSL Specifications

General

Brand	HP
Model	NonStop SSL
Category	Software
Language	English