Explanation:

Determines which ciphers specs to use to protect SSL/TLS traffic to and from the server. Specification numbers correspond to the following ciphers:

03 - RSA_EXPORT_WITH_RC4_40_MD5
04 - RSA_WITH_RC4_128_MD5
05 - RSA_WITH_RC4_128_SHA
06 - RSA_EXPORT_WITH_RC2_CBC_40_MD5
09 - RSA_WITH_DES_CBC_SHA
0A -RSA_WITH_3DES_EDE_CBC_SHA
2F - RSA_WITH_AES_128_CBC_SHA
33 - DHE_RSA_WITH_AES_128_CBC_SHA
35 - RSA_WITH_AES_256_CBC_SHA
39 - DHE_RSA_WITH_AES_256_CBC_SHA
3C - RSA_WITH_AES_128_CBC_SHA256
3D - RSA_WITH_AES_256_CBC_SHA256
67 - DHE_RSA_WITH_AES_128_CBC_SHA256
6B - DHE_RSA_WITH_AES_256_CBC_SHA256
9C - RSA_WITH_AES_128_GCM_SHA256
9D - RSA_WITH_AES_256_GCM_SHA384
9E - DHE_RSA_WITH_AES_128_GCM_SHA256
9F - DHE_RSA_WITH_AES_256_GCM_SHA384

To enter multiple ciphers, enter each cipher specification value, including leading zeros. Do not include spaces between values. The order of the list does not matter. For example:

SSLCipherSpec = 9D9C3D353C2F0A

The ciphers in italics are considered weak and require an additional notes.ini variable to enable.

Applies to:

Servers

Default Value:

See [[TLS Cipher Configuration]] for more information.

UI Equivalent:

• In Domino 9.0.1 FP3 IF2 and above, none. See [[TLS Cipher Configuration]] for more information.
• In earlier releases, SSL ciphers field for each Internet protocol in the Ports - Internet Ports of the Server document. The settings in this field are overridden by the SSLCipherSpec notes.ini setting.

Syntax:

SSLCipherSpec = value1value2value3...