Crypto-agility configuration for SFCB is described below.

  • Location of the file for setting ciphers for SFCB:
    /usr/etc/sfcb/sfcb.cfg
  • List of ciphers can be modified at following place in the above-mentioned file:
    ## List of SSL ciphers to enable.
    ## Default is "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH" which disables
    ##      weak ciphers.
    sslCiphers: ALL:!TLSv1:!SSLv3
    
  • Post modification, restart sfcb service in the appliance by using the command:
    sudo service sfcb restart