User Guide

XML configuration files 123

These cipher strings instruct Flash Media Server to accept only RSA key exchange, and refuse

export or null encryption. The server evaluates both strings as equivalent.

<SSLCipherSuite>ALL:+HIGH:+MEDIUM:+LOW:+EXP:+NULL</SSLCipherSuite>

This cipher list instructs the server to accept all ciphers, but order them in order of decreasing

strength. This sequencing allows clients to negotiate for the strongest cipher that both they

and the server can accept.

This string instructs the server to accept only high- and medium-strength encryption, with

the high being preferred, and reject export-strength versions.

Here is the complete list of components that Flash Media Server can evaluate:

Key Exchange Algorithm Description

kRSA Key exchange

kDHr Diffie-Hellman key exchange with RSA key

kDHd Diffie-Hellman key exchange with DSA key

RSA Ephemeral Diffie-Hellman key exchange

DH RSA key exchange

EDH Ephemeral Diffie-Hellman key exchange

ADH Anonymous Diffie-Hellman key exchange

Authentication Methods Description

aNULL No authentication

aRSA RSA authentication

aDSS DSS authentication

aDH Diffie-Hellman authentication

Encryption Methods Description

eNULL No encoding

DES DES encoding

3DES Triple-DES encoding

RC4 RC4 encoding

RC2 RC2 encoding