ssl-cipher-suite
****************


Description
===========

The configuration details of an SSL cipher suite.

The algorithms that compose a cipher suite help you secure Transport
Layer Security (TLS) or Secure Socket Layer (SSL) network connections.
A cipher suite defines the list of security algorithms your load
balancer uses to negotiate with peers while sending and receiving
information. The cipher suites you use affect the security level,
performance, and compatibility of your data traffic.

**Warning:** Oracle recommends that you avoid using any confidential
information when you supply string values using the API.

Oracle created the following predefined cipher suites that you can
specify when you define a resource’s SSL configuration. You can create
custom cipher suites if the predefined cipher suites do not meet your
requirements.

   * __oci->>default-ssl-cipher-suite-v1__<<

        “DHE-RSA-AES128-GCM-SHA256”         “DHE-RSA-AES128-SHA256”
        “DHE-RSA-AES256-GCM-SHA384”         “DHE-RSA-AES256-SHA256”
        “ECDHE-RSA-AES128-GCM-SHA256”         “ECDHE-RSA-
        AES128-SHA256”         “ECDHE-RSA-AES256-GCM-SHA384”
        “ECDHE-RSA-AES256-SHA384”

* __oci->>modern-ssl-cipher-suite-v1__<<

     “AES128-GCM-SHA256”         “AES128-SHA256”         “AES256-GCM-
     SHA384”         “AES256-SHA256”         “DHE-RSA-AES128-GCM-
     SHA256”         “DHE-RSA-AES128-SHA256”         “DHE-RSA-AES256
     -GCM-SHA384”         “DHE-RSA-AES256-SHA256”         “ECDHE-
     ECDSA-AES128-GCM-SHA256”         “ECDHE-ECDSA-AES128-SHA256”
     “ECDHE-ECDSA-AES256-GCM-SHA384”         “ECDHE-ECDSA-
     AES256-SHA384”         “ECDHE-RSA-AES128-GCM-SHA256”
     “ECDHE-RSA-AES128-SHA256”         “ECDHE-RSA-AES256-GCM-SHA384”
     “ECDHE-RSA-AES256-SHA384”

* __oci->>compatible-ssl-cipher-suite-v1__<<

     “AES128-GCM-SHA256”         “AES128-SHA”         “AES128-SHA256”
     “AES256-GCM-SHA384”         “AES256-SHA”         “AES256-SHA256”
     “DHE-RSA-AES128-GCM-SHA256”         “DHE-RSA-AES128-SHA256”
     “DHE-RSA-AES256-GCM-SHA384”         “DHE-RSA-AES256-SHA256”
     “ECDHE-ECDSA-AES128-GCM-SHA256”         “ECDHE-ECDSA-AES128-SHA”
     “ECDHE-ECDSA-AES128-SHA256”         “ECDHE-ECDSA-AES256-GCM-
     SHA384”         “ECDHE-ECDSA-AES256-SHA”         “ECDHE-ECDSA-
     AES256-SHA384”         “ECDHE-RSA-AES128-GCM-SHA256”
     “ECDHE-RSA-AES128-SHA”         “ECDHE-RSA-AES128-SHA256”
     “ECDHE-RSA-AES256-GCM-SHA384”         “ECDHE-RSA-AES256-SHA”
     “ECDHE-RSA-AES256-SHA384”

* __oci->>wider-compatible-ssl-cipher-suite-v1__<<

     “AES128-GCM-SHA256”         “AES128-SHA”         “AES128-SHA256”
     “AES256-GCM-SHA384”         “AES256-SHA”         “AES256-SHA256”
     “CAMELLIA128-SHA”         “CAMELLIA256-SHA”         “DES-
     CBC3-SHA”         “DH-DSS-AES128-GCM-SHA256”         “DH-DSS-
     AES128-SHA”         “DH-DSS-AES128-SHA256”         “DH-DSS-AES256
     -GCM-SHA384”         “DH-DSS-AES256-SHA”         “DH-DSS-
     AES256-SHA256”         “DH-DSS-CAMELLIA128-SHA”         “DH-DSS-
     CAMELLIA256-SHA”         “DH-DSS-DES-CBC3-SHAv”         “DH-DSS-
     SEED-SHA”         “DH-RSA-AES128-GCM-SHA256”         “DH-RSA-
     AES128-SHA”         “DH-RSA-AES128-SHA256”         “DH-RSA-AES256
     -GCM-SHA384”         “DH-RSA-AES256-SHA”         “DH-RSA-
     AES256-SHA256”         “DH-RSA-CAMELLIA128-SHA”         “DH-RSA-
     CAMELLIA256-SHA”         “DH-RSA-DES-CBC3-SHA”         “DH-RSA-
     SEED-SHA”         “DHE-DSS-AES128-GCM-SHA256”         “DHE-DSS-
     AES128-SHA”         “DHE-DSS-AES128-SHA256”         “DHE-DSS-
     AES256-GCM-SHA384”         “DHE-DSS-AES256-SHA”         “DHE-DSS-
     AES256-SHA256”         “DHE-DSS-CAMELLIA128-SHA”         “DHE-
     DSS-CAMELLIA256-SHA”         “DHE-DSS-DES-CBC3-SHA”         “DHE-
     DSS-SEED-SHA”         “DHE-RSA-AES128-GCM-SHA256”         “DHE-
     RSA-AES128-SHA”         “DHE-RSA-AES128-SHA256”         “DHE-RSA-
     AES256-GCM-SHA384”         “DHE-RSA-AES256-SHA”         “DHE-RSA-
     AES256-SHA256”         “DHE-RSA-CAMELLIA128-SHA”         “DHE-
     RSA-CAMELLIA256-SHA”         “DHE-RSA-DES-CBC3-SHA”         “DHE-
     RSA-SEED-SHA”         “ECDH-ECDSA-AES128-GCM-SHA256”
     “ECDH-ECDSA-AES128-SHA”         “ECDH-ECDSA-AES128-SHA256”
     “ECDH-ECDSA-AES256-GCM-SHA384”         “ECDH-ECDSA-AES256-SHA”
     “ECDH-ECDSA-AES256-SHA384”         “ECDH-ECDSA-DES-CBC3-SHA”
     “ECDH-ECDSA-RC4-SHA”         “ECDH-RSA-AES128-GCM-SHA256”
     “ECDH-RSA-AES128-SHA”         “ECDH-RSA-AES128-SHA256”
     “ECDH-RSA-AES256-GCM-SHA384”         “ECDH-RSA-AES256-SHA”
     “ECDH-RSA-AES256-SHA384”         “ECDH-RSA-DES-CBC3-SHA”
     “ECDH-RSA-RC4-SHA”         “ECDHE-ECDSA-AES128-GCM-SHA256”
     “ECDHE-ECDSA-AES128-SHA”         “ECDHE-ECDSA-AES128-SHA256”
     “ECDHE-ECDSA-AES256-GCM-SHA384”         “ECDHE-ECDSA-AES256-SHA”
     “ECDHE-ECDSA-AES256-SHA384”         “ECDHE-ECDSA-DES-CBC3-SHA”
     “ECDHE-ECDSA-RC4-SHA”         “ECDHE-RSA-AES128-GCM-SHA256”
     “ECDHE-RSA-AES128-SHA”         “ECDHE-RSA-AES128-SHA256”
     “ECDHE-RSA-AES256-GCM-SHA384”         “ECDHE-RSA-AES256-SHA”
     “ECDHE-RSA-AES256-SHA384”         “ECDHE-RSA-DES-CBC3-SHA”
     “ECDHE-RSA-RC4-SHA”         “IDEA-CBC-SHA”         “KRB5-DES-
     CBC3-MD5”         “KRB5-DES-CBC3-SHA”         “KRB5-IDEA-CBC-MD5”
     “KRB5-IDEA-CBC-SHA”         “KRB5-RC4-MD5”         “KRB5-RC4-SHA”
     “PSK-3DES-EDE-CBC-SHA”         “PSK-AES128-CBC-SHA”         “PSK-
     AES256-CBC-SHA”         “PSK-RC4-SHA”         “RC4-MD5”
     “RC4-SHA”         “SEED-SHA”

* __oci->>default-http2-ssl-cipher-suite-v1__<<

     “ECDHE-RSA-AES256-GCM-SHA384”         “ECDHE-ECDSA-AES256-GCM-
     SHA384”         “ECDHE-RSA-AES128-GCM-SHA256”         “ECDHE-
     ECDSA-AES128-GCM-SHA256”         “DHE-RSA-AES256-GCM-SHA384”
     “DHE-RSA-AES128-GCM-SHA256”

* __oci->>default-http2-tls-13-ssl-cipher-suite-v1__<<

     “TLS_AES_128_GCM_SHA256”         “TLS_AES_256_GCM_SHA384”
     “TLS_CHACHA20_POLY1305_SHA256”

* __oci->>default-http2-tls-12-13-ssl-cipher-suite-v1__<<

     “ECDHE-RSA-AES256-GCM-SHA384”         “ECDHE-ECDSA-AES256-GCM-
     SHA384”         “ECDHE-RSA-AES128-GCM-SHA256”         “ECDHE-
     ECDSA-AES128-GCM-SHA256”         “DHE-RSA-AES256-GCM-SHA384”
     “DHE-RSA-AES128-GCM-SHA256”         “TLS_AES_128_GCM_SHA256”
     “TLS_AES_256_GCM_SHA384”         “TLS_CHACHA20_POLY1305_SHA256”

* __oci->>tls-13-recommended-ssl-cipher-suite-v1__<<

     “TLS_AES_128_GCM_SHA256”         “TLS_AES_256_GCM_SHA384”
     “TLS_CHACHA20_POLY1305_SHA256”

* __oci->>tls-12-13-wider-ssl-cipher-suite-v1__<<

     “TLS_AES_128_GCM_SHA256”         “TLS_AES_256_GCM_SHA384”
     “TLS_CHACHA20_POLY1305_SHA256”         “ECDHE-ECDSA-AES128-GCM-
     SHA256”         “ECDHE-RSA-AES128-GCM-SHA256”         “ECDHE-
     ECDSA-AES128-SHA256”         “ECDHE-RSA-AES128-SHA256”
     “ECDHE-ECDSA-AES256-GCM-SHA384”         “ECDHE-RSA-AES256-GCM-
     SHA384”         “ECDHE-ECDSA-AES256-SHA384”         “ECDHE-RSA-
     AES256-SHA384”         “AES128-GCM-SHA256”
     “AES128-SHA256”         “AES256-GCM-SHA384”
     “AES256-SHA256”

   * __oci->>tls-11-12-13-wider-ssl-cipher-suite-v1__<<
     “TLS_AES_128_GCM_SHA256”         “TLS_AES_256_GCM_SHA384”
     “TLS_CHACHA20_POLY1305_SHA256”         “ECDHE-ECDSA-AES128-GCM-
     SHA256”         “ECDHE-RSA-AES128-GCM-SHA256”         “ECDHE-
     ECDSA-AES128-SHA256”         “ECDHE-RSA-AES128-SHA256”
     “ECDHE-ECDSA-AES256-GCM-SHA384”         “ECDHE-RSA-AES256-GCM-
     SHA384”         “ECDHE-ECDSA-AES256-SHA384”         “ECDHE-RSA-
     AES256-SHA384”         “AES128-GCM-SHA256”
     “AES128-SHA256”         “AES256-GCM-SHA384”
     “AES256-SHA256”         “ECDHE-ECDSA-AES128-SHA”         “ECDHE-
     RSA-AES128-SHA”         “ECDHE-RSA-AES256-SHA”         “ECDHE-
     ECDSA-AES256-SHA”         “AES128-SHA”         “AES256-SHA”


Available Commands
==================

* create

* delete

* get

* list

* update
