Advanced
108 IOLAN SDS/SCS/STS/MDC User’s Guide, Version 4.0
Adding/Editing a Cipher Suite
To see a list of valid cipher suite combinations, see Appendix B, SSL/TLS Ciphers on page 359.
Configure the following param eters:
Encryption Select the type of encryption that will be used for the SSL connection.
Data Options:
zAny—Will use the first encryption format that can be negotiated.
zAES
z3DES
zDES
zARCFOUR
zARCTWO
Default: Any
Min Key Size The minimum key size value that will be used fo r the specified encryption
type.
Data Options: 40, 56, 64, 128, 168, 25 6
Default: 40
Max Key Size The maximum key size value that will be used for the specified encryption
type.
Data Options: 40, 56, 64, 128, 168, 25 6
Default: 256
Key Exchange The type of key to exchange for the encryption format.
Data Options:
zAny—Any key exchange that is valid is used (this does no t, however,
include ADH keys).
zRSA—This is an RSA key exchange using an RSA key and certificate.
zEDH-RSA—This is an EDH key exchange using an RSA key and
certificate.
zEDH-DSS—This is an EDH key exchange using a DSA key and
certificate.
zADH—This is an anonymous key exchange which does not require a
private key or certificate. Choose this key if you do not want to
authenticate the peer device, but you want the data encrypted on the
SSL/TLS connection.
Default: Any