Configuring ciphers for CORBA connections

This procedure describes how to configure the list of available ciphers for CORBA connections. The default configuration supports all ciphers except export ciphers.

To configure ciphers for CORBA connections:

1. Navigate to the following directory:

   <EM Home Directory>/etc/

2. Open the ssl_ns.conf and ssl_client_server.conf files and edit the -SSLCipherList option.

   You can place single or group of ciphers as values for this option.

3. Use the following syntax between the ciphers and cipher groups:
   • : - include
   • :! – exclude
   • + - move to last in the cipher list

   EXAMPLE: -SSLCipherList 'ALL:!MD5:!SHA1:!EXPORT'

   This value includes all TLSv1.2 ciphers, excluding all export ciphers, MD5 ciphers and SHA1 ciphers.