Thank you for reply Mark , according to doc link there is a cmd: dsconf which I do not
see available in 389-DS to list all available chippers on the host is there any other
solution to check , my OS is Linux ns1-01 3.10.0-862.14.4.el7.x86_64 #1 SM
Thank you
Isabella
From: Mark Reynolds [mailto:mreynolds@redhat.com]
Sent: Thursday, July 02, 2020 11:32 AM
To: General discussion list for the 389 Directory server project.; Ghiurea, Isabella
Subject: Re: [389-users] question related to EnabledCiphers values
On 7/2/20 2:21 PM, Ghiurea, Isabella wrote:
 Running the following ldapsearch returns a lots of entries for nsSSLEnabledCiphers, but
I do not see this values in dse.ldif , where are this values configured or  read, please
advise ?
Â
nsldapsearch -LLLxD 'cn=directory manager' -W -b cn=encryption,cn=config -s base
nsSSL3Ciphers nsSSLSupportedCiphers nsSSLEnabledCiphers
The supported and enabled ciphers are provided by the NSS security library (which in turn
is impacted by the system-wide crypto policy).
Also see:
https://access.redhat.com/documentation/en-us/red_hat_directory_server/11...
Â
Thank you
Isabella
_______________________________________________
389-users mailing list --
389-users@lists.fedoraproject.org<mailto:389-users@lists.fedoraproject.org>
To unsubscribe send an email to
389-users-leave@lists.fedoraproject.org<mailto:389-users-leave@lists.fedoraproject.org>
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
--
389 Directory Server Development Team