DEFAULT_CIPHER - UCMD Manager configuration option
Description
The DEFAULT_CIPHER option specifies the SSL/TLS cipher suite to be used for data sessions when the DATA_ENCRYPTION configuration option is set to no.
Usage
Method | Syntax | IBM i | UNIX | Windows | z/OS |
|---|---|---|---|---|---|
Command Line, Short Form | n/a | ||||
Command Line, Long Form | -default_cipher cipher | ||||
Environment Variable | UCMDDEFAULTCIPHER=cipher | ||||
Configuration File Keyword | default_cipher cipher | ||||
STRUCM Parameter | DFTCPHR(cipher) |
Values
cipher is the SSL/TLS cipher suite to be used.
The following table identifies the list of SSL/TLS cipher suites supported for this option.
Cipher Suite | Description |
|---|---|
AES256-GCM-SHA384 | 256-bit AES encryption in Galois Counter Mode, SHA-2 384-bit message digest. |
AES256-SHA | 256-bit AES encryption with SHA-1 message digest. |
AES128-GCM-SHA256 | 128-bit AES encryption in Galois Counter Mode, SHA-2 256-bit message digest. |
AES128-SHA | 128-bit AES encryption with SHA-1 message digest. |
ECDHE-RSA-AES256-GCM-SHA384 | Ephemeral Elliptic Curve Diffie-Hellman Key Exchange, RSA authentication, 256-bit AES encryption in Galois Counter Mode, SHA-2 384-bit message digest. |
ECDHE-ECDSA-AES256-GCM-SHA384 | Ephemeral Elliptic Curve Diffie-Hellman Key Exchange, ECDSA authentication, 256-bit AES encryption in Galois Counter Mode, SHA-2 384-bit message digest. |
ECDHE-RSA-AES128-GCM-SHA256 | Ephemeral Elliptic Curve Diffie-Hellman Key Exchange, RSA authentication, 128-bit AES encryption in Galois Counter Mode, SHA-2 256-bit message digest. |
ECDHE-ECDSA-AES128-GCM-SHA256 | Ephemeral Elliptic Curve Diffie-Hellman Key Exchange, ECDSA authentication, 128-bit AES encryption in Galois Counter Mode, SHA-2 256-bit message digest. |
RC4-SHA | 128-bit RC4 encryption with SHA-1 message digest. |
RC4-MD5 | 128-bit RC4 encryption with MD5 message digest. |
DES-CBC3-SHA | 128-bit Triple-DES encryption with SHA-1 message digest. |
NULL-SHA256 | No encryption and SHA-2 256-bit message digest. |
NULL-SHA | No encryption and SHA-1 message digest. |
NULL-MD5 | No encryption and MD5 message digest. |
NULL-NULL | No encryption, no data authentication, SSL/TLS is not used; instead, Universal V2 Protocol(UNVv2) is used. |
Default is NULL-MD5.