How to modify the Cipher Suite of the eDiscovery Platform

book

Article ID: 100049689

calendar_today

Updated On:

Description

Description

The eDiscovery Platform (eDP) comes preconfigured with an existing Cipher Suite.  It may be required to modify it to meet specific organizational requirements.  Please follow the steps below to list the current values or make changes.

NOTE:
Ciphers need to be added using the appropriate IANA name instead of the OpenSSL name.
 

OpenSSL Name IANA Name
ECDHE-RSA-AES256-GCM-SHA384 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDHE-RSA-AES128-GCM-SHA256 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDHE-RSA-AES256-SHA384 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
ECDHE-RSA-AES128-SHA256 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
AES256-GCM-SHA384 TLS_RSA_WITH_AES_256_GCM_SHA384
AES128-GCM-SHA256 TLS_RSA_WITH_AES_128_GCM_SHA256
AES256-SHA256 TLS_RSA_WITH_AES_256_CBC_SHA256
AES128-SHA256 TLS_RSA_WITH_AES_128_CBC_SHA256

 

Access Property Browser:

  1. Log into eDP user interface as an administrative account.
     
  2. System
     
  3. Support Features
     
  4. Property Browser


List current values:

  1. Property Browser
     
  2. In the Pattern to match field put:
    • esa.common.webapp.appserver.ciphers
       
  3. Click Submit


Modify existing values:

NOTE: eDP will honor the order they are placed within this value.  It can either be appended to or replaced with the exact order as required.  Use a comma to separate all values.

  1. Property Browser
     
  2. In the Name of property to change: put:
     
  3. esa.common.webapp.appserver.ciphers
     
  4. In the new value field put the values you wish to add.

    Note: Please see the example below to add the IANA Name list from above:
    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256, TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384, TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA256
  5. Put a check in Confirm change.  Are you sure?
     
  6. Click Submit.
     
  7. Restart eDP services via Clearwell Utility option 3 & option 4.

Issue/Introduction

How to modify the Cipher Suite of the eDiscovery Platform