IBM Tivoli Access Manager for e-business: WebSEAL Administration ...

List
of
string
values
to
specify
the
allowed
encryption
levels
for
HTTPS
access
for
a
specific
combination
of
IP
address
and
netmask.
The
value
ALL
allows
all
ciphers.
The
value
NONE
disables
all
ciphers
and
uses
an
MD5
MAC
check
sum.
To
specify
allowable
ciphers
for
a
selected
group
of
IP
addresses
and
netmasks,
create
a
separate
entry
for
each
address/netmask
combination.
For
example:
111.222.333.444/255.255.255.0
=
RC4-128
222.666.333.111/255.255.0.0
=
RC2-128
This
stanza
entry
is
optional.
There
is
no
default
value.
Example:
111.222.333.444/255.255.255.0
=
RC4-128
Note
that
this
stanza
has
been
deprecated
and
is
retained
only
for
backwards
compatibility.
For
more
information,
including
a
list
of
supported
cipher_levels,
see
“Quality
of
protection
levels”
on
page
38.
[ssl-qop-mgmt-default]
stanza
default
=
{ALL|NONE|cipher_level}
List
of
string
values
to
specify
the
allowed
encryption
levels
for
HTTPS
access.
The
value
ALL
allows
all
ciphers.
The
value
NONE
disables
all
ciphers
and
uses
an
MD5
MAC
check
sum.
To
specify
a
selected
group
of
ciphers,
create
a
separate
entry
for
each
cipher.
For
example:
default
=
RC4-128
default
=
RC2-128
default
=
DES-168
Values
specified
in
this
stanza
entry
are
used
for
all
IP
addresses
that
are
not
matched
in
either
the
[ssl-qop-mgmt-hosts]
stanza
entries
or
the
[ssl-qop-mgmt-networks]
stanza
entries.
This
stanza
entry
is
required.
Default
value:
ALL
Example:
default
=
ALL
For
more
information,
including
a
list
of
supported
cipher_levels,
see
“Quality
of
protection
levels”
on
page
38.
436
IBM
Tivoli
Access
Manager
for
e-business:
WebSEAL
Administration
Guide