How to disable and enable specific weak/good ciphers In SSL profiles. How to achieve this .

Hi sandip kakade,

In client ssl profile:

TLSv1_3:AES128-GCM-SHA256:AES256-GCM-SHA384

With this cipher suite, the following ciphers will be usable.

TLS13-AES128-GCM-SHA256/TLS1.3
TLS13-AES256-GCM-SHA384/TLS1.3
TLS13-CHACHA20-POLY1305-SHA256/TLS1.3
AES128-GCM-SHA256/TLS1.2
AES256-GCM-SHA384/TLS1.2

IANA name:

TLS_RSA_WITH_AES_128_GCM_SHA256

OpenSSL name:

AES128-GCM-SHA256

IANA name:

TLS_RSA_WITH_AES_256_GCM_SHA384

OpenSSL name:

AES256-GCM-SHA384