Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 482 / 866

Configuring the Server’s Security Preferences
482 Netscape Certificate Management System Installation and Setup Guide • October 2001
Setting Up Cipher Preferences for SSL
Communications
A cipher is the algorithm used in encryption. Some ciphers have stronger encryption
capabilities than others. Generally speaking, the more bits a cipher uses during
encryption, the harder it is to decrypt the data.
When a client initiates an SSL connection with Certificate Management System, it
lets the server know what ciphers it prefers to use to encrypt information. In any
two-way encryption process, both parties must use the same ciphers. A number of
ciphers are available; your server needs to be able to use the most popular ones.
SSL Ciphers Supported in Certificate Management System
Figure 14-1 shows the ciphers supported by Certificate Management System (on
the server side). The figure shows SSL 2.0 and 3.0 ciphers supported in the
domestic (US and Canada) version of Certificate Management System. Note that
Certificate Management System has received retail status from the United States
Department of Commerce Bureau of Export Administration; under new
regulations, retail status makes it possible to export Certificate Management
System with the same encryption and cryptographic features available in the US
and Canada. For more information, check the license and export-control
information accompanying the product.