Skip to main content
sakuburi
New Member
June 4, 2019
Solved

how to view ciphers

  • June 4, 2019
  • 1 reply
  • 4050 views

Does anyone know how to view ciphers for access to HA cluster from client ?

I configured below. and I would like to know whether what kind of ciphers it can be avairable.

config system global   set strong-crypto enable

config system global     set admin-https-ssl-versions tlsv1-2

 

thank you

    Best answer by Toshi_Esumi

    If you're looking for admin https access, hit a '?' after "set admin-https-ssl-version" like below. You can list multiple in the set command. Just be aware SSL VPN might have different setting at "set ssl-min-proto-version".

     

    xxx-fg1 (global) # set admin-https-ssl-versions ? tlsv1-0    TLS 1.0. tlsv1-1    TLS 1.1. tlsv1-2    TLS 1.2.

     

    xxx-fg1 (global) # set ssl-min-proto-version ? SSLv3      SSLv3. TLSv1      TLSv1. TLSv1-1    TLSv1.1. TLSv1-2    TLSv1.2.

     

    I heard v6.2 started supporting TLSv1-3.

    1 reply

    Toshi_Esumi
    SuperUser
    SuperUser
    June 4, 2019

    If you're looking for admin https access, hit a '?' after "set admin-https-ssl-version" like below. You can list multiple in the set command. Just be aware SSL VPN might have different setting at "set ssl-min-proto-version".

     

    xxx-fg1 (global) # set admin-https-ssl-versions ? tlsv1-0    TLS 1.0. tlsv1-1    TLS 1.1. tlsv1-2    TLS 1.2.

     

    xxx-fg1 (global) # set ssl-min-proto-version ? SSLv3      SSLv3. TLSv1      TLSv1. TLSv1-1    TLSv1.1. TLSv1-2    TLSv1.2.

     

    I heard v6.2 started supporting TLSv1-3.

    sakuburi
    sakuburiAuthor
    New Member
    June 5, 2019

    Thank you for reply.

     

    Actually, I would like to see cipher suite of admin https access.

    Is there any command to confirm that ?

     

    thank you.