With the tlsCipherSuite option a list of preferred encryption methods for use with TLSv1.2 and with TLSv1.3 respectively is specified. If this option is not specified, a default list of preferences is used. This option can be used doubly, for specifying cipher suites once for TLSv1.2 and once for TLSv1.3. In the latter case TLSv1.3 is prepended to the specification.
tlsCipherSuite |
<TLSv1.2 cipher suite specification> | TLSv1.3 <TLSv1.3 cipher suite specification> |
<TLSv1.2 cipher suite specification>
Specification of a list of preferred encryption methods see chapter “Specification of a cipher suite preference list”
Default: ALL
<TLSv1.3 cipher suite specification>
Specification of a colon separated list of preferred TLSv1.3 encryption methods ("cipher suites").
Default: TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256