SSL_CIPHER_SUITES - UFTP configuration option
Description
The SSL_CIPHER_SUITES option specifies one or more SSL/TLS 1.3 specific cipher suites that UFTP would like to use to secure the control and data sessions for an FTPS transfer.
This option is used only when the transfer protocol is FTPS.
This option is specific to TLS 1.3. To configure ciphers for TLS 1.2 and earlier, see the ssl_cipher_list option.
Usage
Method | Syntax | IBM i | HP NonStop | UNIX | Windows | z/OS |
|---|---|---|---|---|---|---|
Command Line, Short Form | n/a | |||||
Command Line, Long Form | -ssl_cipher_suites list | |||||
Environment Variable | UFTPSSLCIPHERSUITES=list | |||||
Configuration File Keyword | ssl_cipher_suites list |
Values
list is a comma-separated list of TLS 1.3 SSL/TLS cipher suites. The following table identifies the cipher suites supported for this option.
The list is in default order, with the most preferred suite first and the least preferred suite last.
If the SSL implementation is System SSL, the order of the list does not indicate preference.
Cipher Suite | Description |
|---|---|
TLS_AES_256_GCM_SHA384 | 256-bit AES encryption in Galois Counter Mode, SHA-2 384-bit message digest |
TLS_CHACHA20_POLY1305_SHA256 | 256-bit CHACHA encryption with POLY1305 message authentication, SHA-2 256-bit message digest |
TLS_AES_128_GCM_SHA256 | 128-bit AES encryption in Galois Counter Mode, SHA-2 256-bit message digest |