TLS Cipher suit as a provider.

Google Cloud Apigee
1

Hi Team,

We are migrating one application in APIGEE, where we have Terget provider as a two way SSL.

We have to configure cipher in target default.xml. Do we need to declare the cipher suits with in SSLinfo block or we can declare it as outside SSLinfo block as well. Does it will work?

<Propertyname=“proxy_read_timeout”>50****<Propertyname=“keepalive_timeout”>300<Propertyname=“proxy_request_buffering”>off<Propertyname=“proxy_buffering”>off<Propertyname=“ssl_protocols”>TLSv1.2 TLSv1.1<Propertyname=“ssl_ciphers”>HIGH:!aNULL:!MD5:!DH+3DES:!kEDH

I have referred https://docs.apigee.com/api-platform/system-administration/creating-virtual-host
but it seems for crating -virtual host. I have to declare it for creation for Target.

Regards,

Rohit Karadi

2

I believe you’re going to need to put the ciphers and protocols parts inside an SSLInfo block. You can see some examples here: https://docs.apigee.com/api-platform/reference/api-proxy-configuration-reference#tlsssltargetendpointconfiguration