250
FLASH
MEDIA
SERVER
4.5
CONFIGURATION
AND
ADMINISTRATION
XML configuration files reference
Last updated 11/28/2012
This cipher list instructs the server to accept all ciphers but place them in order of decreasing strength. This sequencing
allows clients to negotiate for the strongest cipher that both they and the server can accept.
<SSLCipherSuite>ALL:+HIGH:+LOW:+EXP:+NULL</SSLCipherSuite>
This string instructs the server to accept only high- and medium-strength encryption, with the high being preferred,
and reject export-strength versions.
<SSLCipherSuite>ALL:+HIGH:!LOW:!EXP:!NULL</SSLCipherSuite>
This string instructs the server to accept all ciphers but to order them so that SSLv2 ciphers come after SSLv3 ciphers.
<SSLCipherSuite>ALL:+SSLv2</SSLCipherSuite>
The following is the complete list of components that the server can evaluate.
Key exchange algorithm
Description
kRSA
Key exchange
kDHr
Diffie-Hellman key exchange with RSA key
kDHd
Diffie-Hellman key exchange with DSA key
RSA
Ephemeral Diffie-Hellman key exchange
DH
RSA key exchange
EDH
Ephemeral Diffie-Hellman key exchange
ADH
Anonymous Diffie-Hellman key exchange
Authentication methods
Description
aNULL
No authentication
aRSA
RSA authentication
aDSS
DSS authentication
aDH
Diffie-Hellman authentication
Encryption methods
Description
eNULL
No encoding
DES
DES encoding
3DES
Triple-DES encoding
RC4
RC4 encoding
RC2
RC2 encoding
IDEA
IDEA encoding
NULL
No encryption
EXP
All export ciphers (40-bit encryption)
LOW
Low-strength ciphers (no export, DES)
MEDIUM
128-bit encryption
HIGH
Triple-DES encoding