SecurityConfigInfo
SecurityConfigInfo
Security configuration of connection server and secure gateway.
JSON Example
{
"certificate_properties": {
"key_length": 2048,
"validity": 365
},
"connection_server_security_config": {
"client_properties": {
"cipher_suites": [
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
],
"named_groups": [
"SECP384_R1",
"FFDHE_2048"
],
"signature_algorithms": [
"RSA_PSS_RSAE_SHA512",
"RSA_PKCS1_SHA512",
"ECDSA_SECP521R1_SHA512"
],
"thumbprint_algorithms": [
"SHA_512",
"SHA_384"
]
},
"server_properties": {
"cipher_suites": [
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_RSA_WITH_AES_128_CBC_SHA256"
],
"named_groups": [
"SECP384_R1",
"FFDHE_4096"
],
"signature_algorithms": [
"RSA_PSS_RSAE_SHA512",
"RSA_PKCS1_SHA512",
"RSA_PKCS1_SHA1"
],
"thumbprint_algorithms": [
"SHA_512",
"SHA_384"
]
}
},
"secure_gateway_security_config": {
"client_properties": {
"cipher_suites": [
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256",
"TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"
],
"named_groups": [
"SECP384_R1",
"FFDHE_2048"
],
"signature_algorithms": [
"RSA_PSS_RSAE_SHA512",
"RSA_PKCS1_SHA512",
"ECDSA_SECP521R1_SHA512"
],
"thumbprint_algorithms": [
"SHA_512",
"SHA_384"
]
},
"server_properties": {
"cipher_suites": [
"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256",
"TLS_RSA_WITH_AES_128_CBC_SHA256"
],
"named_groups": [
"SECP384_R1",
"FFDHE_4096"
],
"signature_algorithms": [
"RSA_PSS_RSAE_SHA512",
"RSA_PKCS1_SHA512",
"RSA_PKCS1_SHA1"
],
"thumbprint_algorithms": [
"SHA_512",
"SHA_384"
]
}
}
}