aaa authentication oidc client ssl cipher-list

Sets the list of cipher suites to be used by the OIDC client over SSL and TLS.

Syntax

[no] aaa authentication oidc client ssl cipher-list { fips | cc-ndcpp |fips-and-cc-ndcpp | fips-high-security | cc-ndcpp-high-security | fips-and-cc-ndcpp-high-security | compatible }

Parameters

no

Use the no form of this command to use to the default (compatible) cipher set.

fips

A set of ciphers required by FIPS certification.

cc-ndcpp

 A set of ciphers required by the Common Criteria certification.

[fips-and-cc-ndcpp]

A set of ciphers required by both the FIPS certification and the Common Criteria certification.

fips-high-security

A set of ciphers required by FIPS certification that excludes low-security ciphers.

cc-ndcpp-high-security

A set of ciphers required by the Common Criteria certification that excludes low-security ciphers.

fips-and-cc-ndcpp-high-security

A set of ciphers required by both the FIPS certification and the Common Criteria certification that excludes low-security ciphers.

compatible

Improved security while maintaining backward compatibility. (default)

Example

The following example uses the fips-high-security cipher set:

hostname (config) # aaa authentication oidc client ssl cipher-list fips-high-security

User role

Admin

Command mode

Config

Supported appliances