CSM: supported SSL cypher-cuites

Hello.
According to documentation, CSM support all available SSL cipher-suites except NULL-suites (e.g. RSA_WITH_NULL_MD5, RSA_WITH_NULL_SHA).
We intend to use null-suites for authentication purposes and we don't need encryption in SSL because IPSec VPN is implemented.
Could you please tell if CSM supports SSL NULL-suites? Thank you.

The problem exactly is that we have already deployed IPSEC VPN and thus we don't need double encryption (with SSL), but still we don't use IPSEC AH for authentication purposes (only ESP). We also want to use X.509 certificates for server authentication, so we intend to use SSL-terminators for that purpose (SSL handshake is bound stricty to null cipher-suites).
Summary from above: IPSEC-terminators for encryption, SSL-terminators for authentication.
Our local CISCO representative has informed us, that CSS 11000 SCA2 supports null-encryption.

Similar Messages

What modifications are required to make a servlet support SSL data encrypti

Hi,
What modifications are required to make a servlet support SSL data encryption?
--kumar

Hi,
What modifications are required to make a servlet
support SSL data encryption?
--kumar No modifications are required in servlet. You have to setup servlet container.

What version of SQL Server support ssl connection with TLS. 1.2 (SHA-256 HASH)

Hi,
I just want to know,
What version of SQL Server support ssl connection with TLS. 1.2 (SHA-256 HASH).
if support already,
how can i setting.
plz. help me!!!

The following blog states that SQL Server "leverages the SChannel layer (the SSL/TLS layer provided
by Windows) for facilitating encryption. Furthermore, SQL Server will completely rely upon SChannel to determine the best encryption cipher suite to use." meaning that the version of SQL Server you are running has no bearing on which
encryption method is used to encrypt connections between SQL Server and clients.
http://blogs.msdn.com/b/sql_protocols/archive/2007/06/30/ssl-cipher-suites-used-with-sql-server.aspx
So the question then becomes which versions of Windows Server support TLS 1.2. The following article indicates that Windows Server 2008 R2 and beyond support TLS 1.2.
http://blogs.msdn.com/b/kaushal/archive/2011/10/02/support-for-ssl-tls-protocols-on-windows.aspx
So if you are running SQL Server on Windows Server 2008 R2 or later you should be able to enable TLS 1.2 and install a TLS 1.2 certificate. By following the instructions in the following article you should then be able to enable TLS 1.2 encryption
for connections between SQL Server and your clients:
http://support.microsoft.com/kb/316898
I hope that helps.

JavaMail supports SSL: True or False?

Hi Guys, this is my first time here. :)
Btw, I have questions:
1. Does JavaMail really support SSL or not from the original package? Cause from the FAQ, They said it's not. But i've read some examples where there is a class imported from javax.net.ssl.SSLFactory kind like that. So my question is, is it really supported?
2. I want to create a program that sends email with or without SSL. Is there any simple "if" block that distinctively differentiate from SSL connection with the standard one? What i mean is something like this.
boolean isPOPSSL;
Properties prop = new Properties();
if(isPOPSSL)
    //SSL Connection
prop.setProperty(    //set Properties for SSL);
else
    //SSLless connection
prop.setProperty(    //set Properties for standard connection);
}Can somebody explain what thigs should I put inside the "if" body there?
3. Is it true that SMTP server doesn't need any SSL encryption because thre's already a TLS in SMTP Protocol?
Thanks for your attention. :)

1. Does JavaMail really support SSL or not from the original package? Cause from the FAQ, They said it's not. But i've read some examples where there is a class imported from javax.net.ssl.SSLFactory kind like that. So my question is, is it really supported?Yes, SSL is fully supported.
Where in the FAQ did you read that SSL was not supported?
Did you find the file SSLNOTES.txt that's included with the JavaMail download?
2. I want to create a program that sends email with or without SSL. Is there any simple "if" block that distinctively differentiate from SSL connection with the standard one?The simplest approach is to choose the protocol name based on whether you want SSL or not:
if (isSSL)
    prot = "smtps";
else
    prot = "smtp";
props.put("mail." + prot + ".host", mailhost);
...The smtpsend.java demo program illustrates this approach.
3. Is it true that SMTP server doesn't need any SSL encryption because thre's already a TLS in SMTP Protocol?There are two approaches for using SSL:
1. Connect on a socket that uses SSL right from the beginning. This is what the "smtps"
protocol does.
2. Connect on a plain socket, then switch to SSL (aka, TLS). This is what the "STARTTLS"
command does. You can enable use of this command by setting an appropriate property.
See the com.sun.mail.smtp package javadocs.
Some servers will support one approach, some will support the other, some will support both.

JMS receiver adapter supports SSL??

Hi
We have a interface in our project which uses JMS adapter and to make it secured communication , we are requested to use SSL.
Can anyone please suggest if JMS receiver adapter supports SSL.
If no possible, coould you please let us know any other alternative approach to this.
Regards
Jagruth

Look into below discussions
JMS To MQSeries with SSL.
Regards
Aashish Sinha

How to make tomcat 5 support SSL (https)?

Hi,
is there a way to make tomcat support SSL (https)?
i using: Apache 1.3.33
with : Tomcat 5.0.28-1.00RC2
and : jakarta-tomcat-connectors-jk-1.2.6
JDK: j2sdk1.4.0_04
Many thanks
Anatolia

Thanks very much Sherbir,
But JSSE is integrated into the Java 2 SDK, Standard Edition, v 1.4 and above!
here is what i'm facing:
the documentation says:
>
It is important to note that configuring Tomcat to take advantage of secure sockets is usually only necessary when running it as a stand-alone web server. When running Tomcat primarily as a Servlet/JSP container behind another web server, such as Apache or Microsoft IIS, it is usually necessary to configure the primary web server to handle the SSL connections from users. Typically, this server will negotiate all SSL-related functionality, then pass on any requests destined for the Tomcat container only after decrypting those requests. Likewise, Tomcat will return cleartext responses, that will be encrypted before being returned to the user's browser. In this environment, Tomcat knows that communications between the primary web server and the client are taking place over a secure connection (because your application needs to be able to ask about this), but it does not participate in the encryption or decryption itself.
I'm running running Tomcat as a Servlet/JSP container behind Apache 1.3.33 web server.
So all SSL requests are handled by apache web server, but the problem I'm facing is that if i request any jsp page using https (ssl) i get plain text and it's not handled by tomcat!
i have a test page called test.jsp:
<html>
<head>
<title>JSP test page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p>2 x 2 = <%= 2 + 2 %>
</p>
</body>
</html> If I request this page using normal http request I get my results fine:
2 x 2 = 4
but if i request the page using https (ssl) I get a clear plain text of my jsp file content like this:
<html>
<head>
<title>JSP test page</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p>2 x 2 = <%= 2 + 2 %>
</p>
</body>
</html> Now how do I fix this problem and make apache passes the jsp file to tomcat if the request was https (ssl) and not send me cleartext of my file content!
Many thanks
Anatolia

Does Oracle Exchange Portlet 2003 Support SSL?

I installed the Oracle Exchange Portlet 2003 successfully. However, when enabling SSL on the Webmail (frontend) of Exchange Server, I got the some SSL handshake error. Just wonder whether the portlet support the SSL.
Failed to handle HTTP Request
java.io.IOException: javax.net.ssl.SSLException: SSL handshake failed:
X509CertChainIncompleteErr
Any advise will be welcomed.
Thanks a lot in advance.

Hi Zhan,
I am not sure that the Exchange portlets support SSL. I will find out more info and get back to you.
thanks,
Harsha

Does certicom implementation support ssl renegotiation ?

does certicom implementation support ssl renegotiation ? We are talking to IIS server from OSB using 2 way ssl and get the below error . IIS doesn't request the client certificate in the initial handshake and it does a ssl renegotiation to request the client certificate.
<<WLS Kernel>> <> <ac73602e9b9282f3:7f182ebf:1342bdce06c:-8000-0000000000000568> <1323589084326> <BEA-000000> <NEW ALERT with Severity: WARNING, Type: 100 (means No- Renegotiation)
Is there a way to make certicom to allow renegotiation. ..don't want to use JSSE for certain reasons...
weblogic version 11.1.1.5
Thanks In advance
Regards
Atheek

ok we need a flag to make it to work : -Dweblogic.security.SSL.enable.renegotiation=true

Does Weblogic support SSL v3.1?

The documentation for both Weblogic 9 and 10 refer to v3.0, but I cannot find any reference to 3.1. Does either version support SSL 3.1?
Thanks,
Doug

The documentation for both Weblogic 9 and 10 refer to v3.0, but I cannot find any reference to 3.1. Does either version support SSL 3.1?
Thanks,
Doug

Does JDBC Drivers in Oracle9i support SSL connection

Hi everybody,
I have to access to some information in Oracle9i DB throught SSL connection from Oracle OCI clients. I would like to know if the administrators have to use an specific datasource and OCI driver. I have to verify if Oracle 9i JDBC drivers support SSL connections.
Thanks you very much
Rosa

In order to use SSL, you would need to install and configure Oracle Advanced Security both on the client and on the database. If I recall correctly, this is an additional cost option if you have the Enterprise Edition database.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

Wireless Adapter Error 10 when CSM Support Disabled

After a motherboard replacement, my Thinkpad Yoga was returned with CSM Support enabled, causing a legacy bios and windows splash screen to appear.
I went into the bios and disabled CSM support to bring back the default black Lenovo boot up screen, but now when windows loads the Wireless Card reports an Error Code 10. I have tried updating to every driver and even refreshed windows to no avail.

I later disabled Broadcom Virtual Wireless Adapter and found that I could still use WiFi so I went on and upgraded to Windows 10 anyway. Broadcom Virtual Wireless Adapter does come off the list on Device Manger but I can still use WiFi regardless.

Does WLS 5.1 support SSL session reuse?

Does WLS 5.1 support SSL session reuse?
I noticed in an earlier post that WLS 4.5 doesn't. It this also true for 5.1?

Does WLS 5.1 support SSL session reuse?
I noticed in an earlier post that WLS 4.5 doesn't. It this also true for 5.1?

CSM-S SSL card redundancy

We have 2 Catalyst 6500s with CSM-S cards installed. The CSMs are in redundant configuration already. The SSL offloading is configured in bridged mode. CSM provides redundancy for the client VLAN. How do we provide redundancy for the SSL cards? Do we use HSRP for the bridged VLAN that exists in the SSL? Do we use HSRP for the SSL admin VLAN? Is there a document the references redundancy configuration specifiacally for the CSM-S (SSL daughter cards)? Thanks.

I guess you can use the HSRP and CSM-S failover configuration to provide redundancy. The following document presents a scenario similar to yours. Hope this helps.
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/mod_icn/csm/csms211/icn/redun.htm#wp1037494

Do Verizon's POP3 and SMTP servers support SSL?

The Mail account setup wizard on Mac OS X 10.6.2 successfully added my new verizon.net email account in a couple of easy steps. During the process, the wizard warned me that my password would be sent in the clear; I told it to continue.
After successfully sending and receiving test messages, I tried enabling SSL for the incoming and outgoing servers. At that point, both sending and receiving failed.
I read the minimalist Support description about email app setup -- no mention of ports or SSL.
Is SSL possible on Verizon's servers?
-- Ward
Solved!
Go to Solution.

Verizon's servers do not support SSL.
If a forum member gives an answer you like, give them the Kudos they deserve. If a member gives you the answer to your question, mark the answer as Accepted Solution so others can see the solution to the problem.
"All knowledge is worth having."

CSM-S SSL daughtercard config sync

Hi there,
First Question
Is it possible to do a config sync for the CMS-S SSL daughtercard ?? On the SSL daughtercard of the standby CSM is no config _
Second Question
How can we built up an redundent configuration (FT) with the CSM-S SSL daughtercard ??
In our actual configuration the CSM works in active - standby mode.
Thanks a lot
Dirk Barnekow

No, you cannot config sync for the CMS-S SSL daughtercard

CSM: supported SSL cypher-cuites

Similar Messages

Maybe you are looking for