跳转到主内容

重新添加后、TLSv1.3的数据在命令行界面中不可见

i
Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

  • ONTAP 9.12.1
  • TLSv1.3
  • 要添加的密码套件:
     tls_aes_128_gcm_SHA256、
     tls_aes_256_gcm_SHA384、
     tls_chacha20_DOLY1305_SHA256

问题描述

运行  security config show 命令之后
 
::*> security config modify -interface SSL -supported-cipher-suites TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256

在已启用的加密中、tls_CHACHA20_多 联1305_SHA256未显示:

::*> security config show
Cluster    Supported FIPS Mode  Protocols Supported Cipher Suites                                                                    
---------- --------- ----------------------------------------------------------
false      TLSv1.3,  TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
           TLSv1.2   TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,
                     TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
                     TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
                     TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,
                     TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
                     TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
                     TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256