Solved: Which SSL Ciphers Supported in Apigee Edge Cloud? - Page 2

Report Inappropriate Content · 06-04-2018 01:57 AM

With the recent TLS 1.0 and 1.1 retirement announcement, I would like to know what are the Cipher Suites supported in Apigee Edge Cloud that are relevant for TLS 1.2.

kurtkanaskie

Apigee Edge Cloud supports the OpenSSL cipher suite equivalents associated with TLSv1.2, which is the only allowed protocol.

See the ssl_ciphers property in the docs here: https://docs.apigee.com/api-platform/fundamentals/virtual-host-property-reference

See the OpenSSL values here: https://www.openssl.org/docs/man1.1.1/man1/ciphers.html

Note, the OpenSSL values are on the right side of the listings, the left side are the names from the relevant specification.

If you try to set a cipher value that is invalid, you'll see:

<Error>
    <Code>messaging.config.beans.InvalidValue</Code>
    <Message>Invalid value foo for ssl_ciphers. Expected values are openssl cipher strings separated by :</Message>
    <Contexts/>
</Error>

The docs use these values as an example:

<Properties>
    <Property name="ssl_ciphers">HIGH:!aNULL:!MD5:!DH+3DES:!kEDH</Property>
</Properties>

View solution in original post