Hide Forgot
Affects: Documentation (Ref Guide, User Guide, etc.) Help Desk Ticket Reference: https://c.na7.visual.force.com/apex/Case_View?id=500A0000008R52i project_key: SOA When using either 1-way or 2-way ssl for the EDS/Teiid connections, there is currently no way to restrict connections to 128 bit cipher suites. The capability needs to be added to the product.
Link: Added: This issue Cloned to SOA-3449
During SSL connection handshake the client and server negotiate on available cipher suites in the both the VMs, then settle on mutually supported cipher suite for encryption. With configuration, it one can constrain which sets of cipher suites are the allowed, such that they can control the encryption strength. The proposed fix to EDS 5.2, will be ability to add a property in the configuration to define these allowed cipher suites. however, the default configuration will not add any property such that the current behaviour is preserved. If user wants to restrict they will need to modify the configuration, which will then enable the feature.
Affects: Added: Documentation (Ref Guide, User Guide, etc.)
See the "Admin Guide" SSL section for usage.
Release Notes Text: Added: Has ability to constrain the allowed cipher suites negotiated during a SSL connection.
I'll create a change request to follow up to this.
Change request.
Attachment: Added: ChangeRequest_TeiidCipherSuitesSupport.odt
Closed.