I have the following entries in my notes.ini:
# https://www-10.lotus.com/ldd/dominowiki.nsf/dx/TLS_Cipher_Configuration
SSLCipherSpec=C030009FC02F009EC028006BC0140039C0270067C0130005
I scanned my notes.ini for SSL (in various cases) and that is the ONLY line in my notes.ini referencing SSL.
I connected using FF and it connected fine at a TLS 1.2 cipher.
Then I pointed the url in FF to about:config and changed security.tls.version.max from 3 down to 1.
Went to my website and now the cipher being used is:
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA, 256 BIT KEYS, TLS 1.0
This is C014 from the notes.ini line
According to https://www-10.lotus.com/ldd/dominowiki.nsf/dx/TLS_Cipher_Configuration
this is TLS 1.2. Apparently firefox FF thinks it is TLS 1.0
Who is right?
Or is FF saying I only want to use TLS 1.0 but, dang, I'll use this instead?
According to http://www.openssl.org/docs/manmaster/apps/ciphers.html
I think (and I may be interpreting that site wrong) it is an elliptical curve extension of TLS 1.0. However it was on a list of "recommended cipher configurations" from our last external security scan.
BTW our external security scans are performed by a wholly owned subsidiary of IBM. Kind of fun and IBM and IBM start fighting...