8.9.2 Support Specifications
The following tables describe SSL supported by the Switch.
|
Category |
Description |
Supported |
|---|---|---|
|
SSL/TLS Versioning |
TLS 1.0 |
OK |
|
TLS 1.1 |
OK |
|
|
TLS 1.2 |
OK |
|
|
Cipher suite |
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 |
OK |
|
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 |
OK |
|
|
TLS_RSA_WITH_AES_256_GCM_SHA384 |
NG |
|
|
TLS_RSA_WITH_AES_128_GCM_SHA256 |
NG |
|
|
TLS_RSA_WITH_AES_256_CBC_SHA |
OK |
|
|
TLS_RSA_WITH_AES_128_CBC_SHA |
OK |
|
|
TLS_RSA_WITH_3DES_EDE_CBC_SHA |
OK |
|
|
TLS_RSA_WITH_RC4_128_SHA |
OK |
|
|
Authentication method |
RSA(1024~4096) |
OK |
|
Message Authentication Code |
SHA-256, SHA-384, SHA-512, SHA-1 |
OK |
(Legend) OK: Supported NG: Not supported
It is recommended to use RSA 2048 as the authentication method and SHA-256 as the message authentication code.