Community
 
 
 

Radia - General Discussions

1323フォロワー
 
Avatar
Libor Janda

Tightening SSL

Hello all,

does anyone experience with tweaking SSL? I need to turn SSL v3 off on RCS in Radia 8.1. Documented is only configuring cipher set in EDMPROF.

Any idea?

Libor

1件のコメント
0

サインインしてコメントを残してください。

 
 

Previous 1件のコメント

Avatar
Fazahath Baig

Hi Libor,

It is possible to disable SSLv3 in RCS for 8.1 by editing edmprof.dat file.
SSL_CIPHERS      = ALL:!ADH:!EXP:!NULL:+HIGH:+MEDIUM:-LOW:-SSLv2:-SSLv3

However, if you have enabled SSL satellite communication in dmabatch.rc, that will also be disabled since Radia 8.1 TLS1 shares ciphers with SSLv3.
Radia 8.1 dmabatch.exe and nvdkit.exe used for Radia 8.1 does not support TLS1.1 and TLS1.2 above versions.

In short, if you are not using ssl on dmabatch, it should be ok to disable SSLv3 on RCS.
If you have enabled SSL on dmabatch.rc, disabling SSL v3 on RCS will disable the Satellite communication as well.

NOTE: This change would not affect 9.X versions of Radia.

 

コメントアクション パーマリンク

Top Contributors