ssl_cipher_suites
Creates, updates, deletes, gets or lists a ssl_cipher_suites resource.
Overview​
| Name | ssl_cipher_suites |
| Type | Resource |
| Id | oci.load_balancer.ssl_cipher_suites |
Fields​
The following fields are returned by SELECT queries:
- get
- list
The SSL cipher suite's configuration information is being retrieved.
| Name | Datatype | Description |
|---|---|---|
name | string | A friendly name for the SSL cipher suite. It must be unique and it cannot be changed. Note: The name of your user-defined cipher suite must not be the same as any of Oracle's predefined or reserved SSL cipher suite names: * oci-default-ssl-cipher-suite-v1 * oci-modern-ssl-cipher-suite-v1 * oci-compatible-ssl-cipher-suite-v1 * oci-wider-compatible-ssl-cipher-suite-v1 * oci-customized-ssl-cipher-suite * oci-default-http2-ssl-cipher-suite-v1 * oci-default-http2-tls-13-ssl-cipher-suite-v1 * oci-default-http2-tls-12-13-ssl-cipher-suite-v1 * oci-tls-13-recommended-ssl-cipher-suite-v1 * oci-tls-12-13-wider-ssl-cipher-suite-v1 * oci-tls-11-12-13-wider-ssl-cipher-suite-v1 example: example_cipher_suite (pattern: <code>^[a-zA-Z0-9_-]*$</code>) |
ciphers | array | A list of SSL ciphers the load balancer must support for HTTPS or SSL connections. The following ciphers are valid values for this property: * TLSv1.3 ciphers "TLS_AES_128_GCM_SHA256" "TLS_AES_256_GCM_SHA384" "TLS_CHACHA20_POLY1305_SHA256" "TLS_AES_128_CCM_SHA256" "TLS_AES_128_CCM_8_SHA256" * TLSv1.2 ciphers "AES128-GCM-SHA256" "AES128-SHA256" "AES256-GCM-SHA384" "AES256-SHA256" "DH-DSS-AES128-GCM-SHA256" "DH-DSS-AES128-SHA256" "DH-DSS-AES256-GCM-SHA384" "DH-DSS-AES256-SHA256" "DH-RSA-AES128-GCM-SHA256" "DH-RSA-AES128-SHA256" "DH-RSA-AES256-GCM-SHA384" "DH-RSA-AES256-SHA256" "DHE-DSS-AES128-GCM-SHA256" "DHE-DSS-AES128-SHA256" "DHE-DSS-AES256-GCM-SHA384" "DHE-DSS-AES256-SHA256" "DHE-RSA-AES128-GCM-SHA256" "DHE-RSA-AES128-SHA256" "DHE-RSA-AES256-GCM-SHA384" "DHE-RSA-AES256-SHA256" "ECDH-ECDSA-AES128-GCM-SHA256" "ECDH-ECDSA-AES128-SHA256" "ECDH-ECDSA-AES256-GCM-SHA384" "ECDH-ECDSA-AES256-SHA384" "ECDH-RSA-AES128-GCM-SHA256" "ECDH-RSA-AES128-SHA256" "ECDH-RSA-AES256-GCM-SHA384" "ECDH-RSA-AES256-SHA384" "ECDHE-ECDSA-AES128-GCM-SHA256" "ECDHE-ECDSA-AES128-SHA256" "ECDHE-ECDSA-AES256-GCM-SHA384" "ECDHE-ECDSA-AES256-SHA384" "ECDHE-RSA-AES128-GCM-SHA256" "ECDHE-RSA-AES128-SHA256" "ECDHE-RSA-AES256-GCM-SHA384" "ECDHE-RSA-AES256-SHA384" * TLSv1 ciphers also supported by TLSv1.2 "AES128-SHA" "AES256-SHA" "CAMELLIA128-SHA" "CAMELLIA256-SHA" "DES-CBC3-SHA" "DH-DSS-AES128-SHA" "DH-DSS-AES256-SHA" "DH-DSS-CAMELLIA128-SHA" "DH-DSS-CAMELLIA256-SHA" "DH-DSS-DES-CBC3-SHAv" "DH-DSS-SEED-SHA" "DH-RSA-AES128-SHA" "DH-RSA-AES256-SHA" "DH-RSA-CAMELLIA128-SHA" "DH-RSA-CAMELLIA256-SHA" "DH-RSA-DES-CBC3-SHA" "DH-RSA-SEED-SHA" "DHE-DSS-AES128-SHA" "DHE-DSS-AES256-SHA" "DHE-DSS-CAMELLIA128-SHA" "DHE-DSS-CAMELLIA256-SHA" "DHE-DSS-DES-CBC3-SHA" "DHE-DSS-SEED-SHA" "DHE-RSA-AES128-SHA" "DHE-RSA-AES256-SHA" "DHE-RSA-CAMELLIA128-SHA" "DHE-RSA-CAMELLIA256-SHA" "DHE-RSA-DES-CBC3-SHA" "DHE-RSA-SEED-SHA" "ECDH-ECDSA-AES128-SHA" "ECDH-ECDSA-AES256-SHA" "ECDH-ECDSA-DES-CBC3-SHA" "ECDH-ECDSA-RC4-SHA" "ECDH-RSA-AES128-SHA" "ECDH-RSA-AES256-SHA" "ECDH-RSA-DES-CBC3-SHA" "ECDH-RSA-RC4-SHA" "ECDHE-ECDSA-AES128-SHA" "ECDHE-ECDSA-AES256-SHA" "ECDHE-ECDSA-DES-CBC3-SHA" "ECDHE-ECDSA-RC4-SHA" "ECDHE-RSA-AES128-SHA" "ECDHE-RSA-AES256-SHA" "ECDHE-RSA-DES-CBC3-SHA" "ECDHE-RSA-RC4-SHA" "IDEA-CBC-SHA" "KRB5-DES-CBC3-MD5" "KRB5-DES-CBC3-SHA" "KRB5-IDEA-CBC-MD5" "KRB5-IDEA-CBC-SHA" "KRB5-RC4-MD5" "KRB5-RC4-SHA" "PSK-3DES-EDE-CBC-SHA" "PSK-AES128-CBC-SHA" "PSK-AES256-CBC-SHA" "PSK-RC4-SHA" "RC4-MD5" "RC4-SHA" "SEED-SHA" example: ["ECDHE-RSA-AES256-GCM-SHA384","ECDHE-ECDSA-AES256-GCM-SHA384","ECDHE-RSA-AES128-GCM-SHA256"] |
The configuration details of an SSL cipher suite.<br /><br />The algorithms that compose a cipher suite help you secure Transport Layer Security (TLS) or Secure Socket Layer<br />(SSL) network connections. A cipher suite defines the list of security algorithms your load balancer uses to<br />negotiate with peers while sending and receiving information. The cipher suites you use affect the security<br />level, performance, and compatibility of your data traffic.<br /><br />Warning: Oracle recommends that you avoid using any confidential information when you supply string values using the API.<br /><br />Oracle created the following predefined cipher suites that you can specify when you define a resource's<br />[SSL configuration](/api/#/en/loadbalancer/20170115/datatypes/SSLConfigurationDetails). You can [create custom<br />cipher suites](/api/#/en/loadbalancer/20170115/SSLCipherSuite/CreateSSLCipherSuite) if the predefined cipher<br />suites do not meet your requirements.<br /><br /><br />* oci-default-ssl-cipher-suite-v1<br /><br /> "DHE-RSA-AES128-GCM-SHA256"<br /> "DHE-RSA-AES128-SHA256"<br /> "DHE-RSA-AES256-GCM-SHA384"<br /> "DHE-RSA-AES256-SHA256"<br /> "ECDHE-RSA-AES128-GCM-SHA256"<br /> "ECDHE-RSA-AES128-SHA256"<br /> "ECDHE-RSA-AES256-GCM-SHA384"<br /> "ECDHE-RSA-AES256-SHA384"<br /><br />* oci-modern-ssl-cipher-suite-v1<br /><br /> "AES128-GCM-SHA256"<br /> "AES128-SHA256"<br /> "AES256-GCM-SHA384"<br /> "AES256-SHA256"<br /> "DHE-RSA-AES128-GCM-SHA256"<br /> "DHE-RSA-AES128-SHA256"<br /> "DHE-RSA-AES256-GCM-SHA384"<br /> "DHE-RSA-AES256-SHA256"<br /> "ECDHE-ECDSA-AES128-GCM-SHA256"<br /> "ECDHE-ECDSA-AES128-SHA256"<br /> "ECDHE-ECDSA-AES256-GCM-SHA384"<br /> "ECDHE-ECDSA-AES256-SHA384"<br /> "ECDHE-RSA-AES128-GCM-SHA256"<br /> "ECDHE-RSA-AES128-SHA256"<br /> "ECDHE-RSA-AES256-GCM-SHA384"<br /> "ECDHE-RSA-AES256-SHA384"<br /><br />* oci-compatible-ssl-cipher-suite-v1<br /><br /> "AES128-GCM-SHA256"<br /> "AES128-SHA"<br /> "AES128-SHA256"<br /> "AES256-GCM-SHA384"<br /> "AES256-SHA"<br /> "AES256-SHA256"<br /> "DHE-RSA-AES128-GCM-SHA256"<br /> "DHE-RSA-AES128-SHA256"<br /> "DHE-RSA-AES256-GCM-SHA384"<br /> "DHE-RSA-AES256-SHA256"<br /> "ECDHE-ECDSA-AES128-GCM-SHA256"<br /> "ECDHE-ECDSA-AES128-SHA"<br /> "ECDHE-ECDSA-AES128-SHA256"<br /> "ECDHE-ECDSA-AES256-GCM-SHA384"<br /> "ECDHE-ECDSA-AES256-SHA"<br /> "ECDHE-ECDSA-AES256-SHA384"<br /> "ECDHE-RSA-AES128-GCM-SHA256"<br /> "ECDHE-RSA-AES128-SHA"<br /> "ECDHE-RSA-AES128-SHA256"<br /> "ECDHE-RSA-AES256-GCM-SHA384"<br /> "ECDHE-RSA-AES256-SHA"<br /> "ECDHE-RSA-AES256-SHA384"<br /><br />* oci-wider-compatible-ssl-cipher-suite-v1<br /><br /> "AES128-GCM-SHA256"<br /> "AES128-SHA"<br /> "AES128-SHA256"<br /> "AES256-GCM-SHA384"<br /> "AES256-SHA"<br /> "AES256-SHA256"<br /> "CAMELLIA128-SHA"<br /> "CAMELLIA256-SHA"<br /> "DES-CBC3-SHA"<br /> "DH-DSS-AES128-GCM-SHA256"<br /> "DH-DSS-AES128-SHA"<br /> "DH-DSS-AES128-SHA256"<br /> "DH-DSS-AES256-GCM-SHA384"<br /> "DH-DSS-AES256-SHA"<br /> "DH-DSS-AES256-SHA256"<br /> "DH-DSS-CAMELLIA128-SHA"<br /> "DH-DSS-CAMELLIA256-SHA"<br /> "DH-DSS-DES-CBC3-SHAv"<br /> "DH-DSS-SEED-SHA"<br /> "DH-RSA-AES128-GCM-SHA256"<br /> "DH-RSA-AES128-SHA"<br /> "DH-RSA-AES128-SHA256"<br /> "DH-RSA-AES256-GCM-SHA384"<br /> "DH-RSA-AES256-SHA"<br /> "DH-RSA-AES256-SHA256"<br /> "DH-RSA-CAMELLIA128-SHA"<br /> "DH-RSA-CAMELLIA256-SHA"<br /> "DH-RSA-DES-CBC3-SHA"<br /> "DH-RSA-SEED-SHA"<br /> "DHE-DSS-AES128-GCM-SHA256"<br /> "DHE-DSS-AES128-SHA"<br /> "DHE-DSS-AES128-SHA256"<br /> "DHE-DSS-AES256-GCM-SHA384"<br /> "DHE-DSS-AES256-SHA"<br /> "DHE-DSS-AES256-SHA256"<br /> "DHE-DSS-CAMELLIA128-SHA"<br /> "DHE-DSS-CAMELLIA256-SHA"<br /> "DHE-DSS-DES-CBC3-SHA"<br /> "DHE-DSS-SEED-SHA"<br /> "DHE-RSA-AES128-GCM-SHA256"<br /> "DHE-RSA-AES128-SHA"<br /> "DHE-RSA-AES128-SHA256"<br /> "DHE-RSA-AES256-GCM-SHA384"<br /> "DHE-RSA-AES256-SHA"<br /> "DHE-RSA-AES256-SHA256"<br /> "DHE-RSA-CAMELLIA128-SHA"<br /> "DHE-RSA-CAMELLIA256-SHA"<br /> "DHE-RSA-DES-CBC3-SHA"<br /> "DHE-RSA-SEED-SHA"<br /> "ECDH-ECDSA-AES128-GCM-SHA256"<br /> "ECDH-ECDSA-AES128-SHA"<br /> "ECDH-ECDSA-AES128-SHA256"<br /> "ECDH-ECDSA-AES256-GCM-SHA384"<br /> "ECDH-ECDSA-AES256-SHA"<br /> "ECDH-ECDSA-AES256-SHA384"<br /> "ECDH-ECDSA-DES-CBC3-SHA"<br /> "ECDH-ECDSA-RC4-SHA"<br /> "ECDH-RSA-AES128-GCM-SHA256"<br /> "ECDH-RSA-AES128-SHA"<br /> "ECDH-RSA-AES128-SHA256"<br /> "ECDH-RSA-AES256-GCM-SHA384"<br /> "ECDH-RSA-AES256-SHA"<br /> "ECDH-RSA-AES256-SHA384"<br /> "ECDH-RSA-DES-CBC3-SHA"<br /> "ECDH-RSA-RC4-SHA"<br /> "ECDHE-ECDSA-AES128-GCM-SHA256"<br /> "ECDHE-ECDSA-AES128-SHA"<br /> "ECDHE-ECDSA-AES128-SHA256"<br /> "ECDHE-ECDSA-AES256-GCM-SHA384"<br /> "ECDHE-ECDSA-AES256-SHA"<br /> "ECDHE-ECDSA-AES256-SHA384"<br /> "ECDHE-ECDSA-DES-CBC3-SHA"<br /> "ECDHE-ECDSA-RC4-SHA"<br /> "ECDHE-RSA-AES128-GCM-SHA256"<br /> "ECDHE-RSA-AES128-SHA"<br /> "ECDHE-RSA-AES128-SHA256"<br /> "ECDHE-RSA-AES256-GCM-SHA384"<br /> "ECDHE-RSA-AES256-SHA"<br /> "ECDHE-RSA-AES256-SHA384"<br /> "ECDHE-RSA-DES-CBC3-SHA"<br /> "ECDHE-RSA-RC4-SHA"<br /> "IDEA-CBC-SHA"<br /> "KRB5-DES-CBC3-MD5"<br /> "KRB5-DES-CBC3-SHA"<br /> "KRB5-IDEA-CBC-MD5"<br /> "KRB5-IDEA-CBC-SHA"<br /> "KRB5-RC4-MD5"<br /> "KRB5-RC4-SHA"<br /> "PSK-3DES-EDE-CBC-SHA"<br /> "PSK-AES128-CBC-SHA"<br /> "PSK-AES256-CBC-SHA"<br /> "PSK-RC4-SHA"<br /> "RC4-MD5"<br /> "RC4-SHA"<br /> "SEED-SHA"<br /><br />* oci-default-http2-ssl-cipher-suite-v1<br /><br /> "ECDHE-RSA-AES256-GCM-SHA384"<br /> "ECDHE-ECDSA-AES256-GCM-SHA384"<br /> "ECDHE-RSA-AES128-GCM-SHA256"<br /> "ECDHE-ECDSA-AES128-GCM-SHA256"<br /> "DHE-RSA-AES256-GCM-SHA384"<br /> "DHE-RSA-AES128-GCM-SHA256"<br /><br />* oci-default-http2-tls-13-ssl-cipher-suite-v1<br /><br /> "TLS_AES_128_GCM_SHA256"<br /> "TLS_AES_256_GCM_SHA384"<br /> "TLS_CHACHA20_POLY1305_SHA256"<br /><br />* oci-default-http2-tls-12-13-ssl-cipher-suite-v1<br /><br /> "ECDHE-RSA-AES256-GCM-SHA384"<br /> "ECDHE-ECDSA-AES256-GCM-SHA384"<br /> "ECDHE-RSA-AES128-GCM-SHA256"<br /> "ECDHE-ECDSA-AES128-GCM-SHA256"<br /> "DHE-RSA-AES256-GCM-SHA384"<br /> "DHE-RSA-AES128-GCM-SHA256"<br /> "TLS_AES_128_GCM_SHA256"<br /> "TLS_AES_256_GCM_SHA384"<br /> "TLS_CHACHA20_POLY1305_SHA256"<br /><br />* oci-tls-13-recommended-ssl-cipher-suite-v1<br /><br /> "TLS_AES_128_GCM_SHA256"<br /> "TLS_AES_256_GCM_SHA384"<br /> "TLS_CHACHA20_POLY1305_SHA256"<br /><br />* oci-tls-12-13-wider-ssl-cipher-suite-v1<br /><br /> "TLS_AES_128_GCM_SHA256"<br /> "TLS_AES_256_GCM_SHA384"<br /> "TLS_CHACHA20_POLY1305_SHA256"<br /> "ECDHE-ECDSA-AES128-GCM-SHA256"<br /> "ECDHE-RSA-AES128-GCM-SHA256"<br /> "ECDHE-ECDSA-AES128-SHA256"<br /> "ECDHE-RSA-AES128-SHA256"<br /> "ECDHE-ECDSA-AES256-GCM-SHA384"<br /> "ECDHE-RSA-AES256-GCM-SHA384"<br /> "ECDHE-ECDSA-AES256-SHA384"<br /> "ECDHE-RSA-AES256-SHA384"<br /> "AES128-GCM-SHA256"<br /> "AES128-SHA256"<br /> "AES256-GCM-SHA384"<br /> "AES256-SHA256"<br /><br /> * oci-tls-11-12-13-wider-ssl-cipher-suite-v1<br /> "TLS_AES_128_GCM_SHA256"<br /> "TLS_AES_256_GCM_SHA384"<br /> "TLS_CHACHA20_POLY1305_SHA256"<br /> "ECDHE-ECDSA-AES128-GCM-SHA256"<br /> "ECDHE-RSA-AES128-GCM-SHA256"<br /> "ECDHE-ECDSA-AES128-SHA256"<br /> "ECDHE-RSA-AES128-SHA256"<br /> "ECDHE-ECDSA-AES256-GCM-SHA384"<br /> "ECDHE-RSA-AES256-GCM-SHA384"<br /> "ECDHE-ECDSA-AES256-SHA384"<br /> "ECDHE-RSA-AES256-SHA384"<br /> "AES128-GCM-SHA256"<br /> "AES128-SHA256"<br /> "AES256-GCM-SHA384"<br /> "AES256-SHA256"<br /> "ECDHE-ECDSA-AES128-SHA"<br /> "ECDHE-RSA-AES128-SHA"<br /> "ECDHE-RSA-AES256-SHA"<br /> "ECDHE-ECDSA-AES256-SHA"<br /> "AES128-SHA"<br /> "AES256-SHA"<br />
| Name | Datatype | Description |
|---|---|---|
name | string | A friendly name for the SSL cipher suite. It must be unique and it cannot be changed. Note: The name of your user-defined cipher suite must not be the same as any of Oracle's predefined or reserved SSL cipher suite names: * oci-default-ssl-cipher-suite-v1 * oci-modern-ssl-cipher-suite-v1 * oci-compatible-ssl-cipher-suite-v1 * oci-wider-compatible-ssl-cipher-suite-v1 * oci-customized-ssl-cipher-suite * oci-default-http2-ssl-cipher-suite-v1 * oci-default-http2-tls-13-ssl-cipher-suite-v1 * oci-default-http2-tls-12-13-ssl-cipher-suite-v1 * oci-tls-13-recommended-ssl-cipher-suite-v1 * oci-tls-12-13-wider-ssl-cipher-suite-v1 * oci-tls-11-12-13-wider-ssl-cipher-suite-v1 example: example_cipher_suite (pattern: <code>^[a-zA-Z0-9_-]*$</code>) |
ciphers | array | A list of SSL ciphers the load balancer must support for HTTPS or SSL connections. The following ciphers are valid values for this property: * TLSv1.3 ciphers "TLS_AES_128_GCM_SHA256" "TLS_AES_256_GCM_SHA384" "TLS_CHACHA20_POLY1305_SHA256" "TLS_AES_128_CCM_SHA256" "TLS_AES_128_CCM_8_SHA256" * TLSv1.2 ciphers "AES128-GCM-SHA256" "AES128-SHA256" "AES256-GCM-SHA384" "AES256-SHA256" "DH-DSS-AES128-GCM-SHA256" "DH-DSS-AES128-SHA256" "DH-DSS-AES256-GCM-SHA384" "DH-DSS-AES256-SHA256" "DH-RSA-AES128-GCM-SHA256" "DH-RSA-AES128-SHA256" "DH-RSA-AES256-GCM-SHA384" "DH-RSA-AES256-SHA256" "DHE-DSS-AES128-GCM-SHA256" "DHE-DSS-AES128-SHA256" "DHE-DSS-AES256-GCM-SHA384" "DHE-DSS-AES256-SHA256" "DHE-RSA-AES128-GCM-SHA256" "DHE-RSA-AES128-SHA256" "DHE-RSA-AES256-GCM-SHA384" "DHE-RSA-AES256-SHA256" "ECDH-ECDSA-AES128-GCM-SHA256" "ECDH-ECDSA-AES128-SHA256" "ECDH-ECDSA-AES256-GCM-SHA384" "ECDH-ECDSA-AES256-SHA384" "ECDH-RSA-AES128-GCM-SHA256" "ECDH-RSA-AES128-SHA256" "ECDH-RSA-AES256-GCM-SHA384" "ECDH-RSA-AES256-SHA384" "ECDHE-ECDSA-AES128-GCM-SHA256" "ECDHE-ECDSA-AES128-SHA256" "ECDHE-ECDSA-AES256-GCM-SHA384" "ECDHE-ECDSA-AES256-SHA384" "ECDHE-RSA-AES128-GCM-SHA256" "ECDHE-RSA-AES128-SHA256" "ECDHE-RSA-AES256-GCM-SHA384" "ECDHE-RSA-AES256-SHA384" * TLSv1 ciphers also supported by TLSv1.2 "AES128-SHA" "AES256-SHA" "CAMELLIA128-SHA" "CAMELLIA256-SHA" "DES-CBC3-SHA" "DH-DSS-AES128-SHA" "DH-DSS-AES256-SHA" "DH-DSS-CAMELLIA128-SHA" "DH-DSS-CAMELLIA256-SHA" "DH-DSS-DES-CBC3-SHAv" "DH-DSS-SEED-SHA" "DH-RSA-AES128-SHA" "DH-RSA-AES256-SHA" "DH-RSA-CAMELLIA128-SHA" "DH-RSA-CAMELLIA256-SHA" "DH-RSA-DES-CBC3-SHA" "DH-RSA-SEED-SHA" "DHE-DSS-AES128-SHA" "DHE-DSS-AES256-SHA" "DHE-DSS-CAMELLIA128-SHA" "DHE-DSS-CAMELLIA256-SHA" "DHE-DSS-DES-CBC3-SHA" "DHE-DSS-SEED-SHA" "DHE-RSA-AES128-SHA" "DHE-RSA-AES256-SHA" "DHE-RSA-CAMELLIA128-SHA" "DHE-RSA-CAMELLIA256-SHA" "DHE-RSA-DES-CBC3-SHA" "DHE-RSA-SEED-SHA" "ECDH-ECDSA-AES128-SHA" "ECDH-ECDSA-AES256-SHA" "ECDH-ECDSA-DES-CBC3-SHA" "ECDH-ECDSA-RC4-SHA" "ECDH-RSA-AES128-SHA" "ECDH-RSA-AES256-SHA" "ECDH-RSA-DES-CBC3-SHA" "ECDH-RSA-RC4-SHA" "ECDHE-ECDSA-AES128-SHA" "ECDHE-ECDSA-AES256-SHA" "ECDHE-ECDSA-DES-CBC3-SHA" "ECDHE-ECDSA-RC4-SHA" "ECDHE-RSA-AES128-SHA" "ECDHE-RSA-AES256-SHA" "ECDHE-RSA-DES-CBC3-SHA" "ECDHE-RSA-RC4-SHA" "IDEA-CBC-SHA" "KRB5-DES-CBC3-MD5" "KRB5-DES-CBC3-SHA" "KRB5-IDEA-CBC-MD5" "KRB5-IDEA-CBC-SHA" "KRB5-RC4-MD5" "KRB5-RC4-SHA" "PSK-3DES-EDE-CBC-SHA" "PSK-AES128-CBC-SHA" "PSK-AES256-CBC-SHA" "PSK-RC4-SHA" "RC4-MD5" "RC4-SHA" "SEED-SHA" example: ["ECDHE-RSA-AES256-GCM-SHA384","ECDHE-ECDSA-AES256-GCM-SHA384","ECDHE-RSA-AES128-GCM-SHA256"] |
Methods​
The following methods are available for this resource:
| Name | Accessible by | Required Params | Optional Params | Description |
|---|---|---|---|---|
get | select | loadBalancerId, name, region | opc-request-id | Gets the specified SSL cipher suite's configuration information. |
list | select | loadBalancerId, region | opc-request-id | Lists all SSL cipher suites associated with the specified load balancer. |
create | insert | loadBalancerId, region, name, ciphers | opc-request-id, opc-retry-token | Creates a custom SSL cipher suite. |
update | update | loadBalancerId, name, region, ciphers | opc-request-id, opc-retry-token | Updates an existing SSL cipher suite for the specified load balancer. |
delete | delete | loadBalancerId, name, region | opc-request-id | Deletes an SSL cipher suite from a load balancer. |
Parameters​
Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.
| Name | Datatype | Description |
|---|---|---|
loadBalancerId | string | The [OCID](/Content/General/Concepts/identifiers.htm) of the associated load balancer. |
name | string | The name of the SSL cipher suite to delete. example: example_cipher_suite |
region | string | OCI region identifier (e.g. us-ashburn-1, ap-sydney-1); resolves from OCI_REGION when not supplied in the query. (default: us-ashburn-1, x-stackQL-envVar: OCI_REGION) |
opc-request-id | string | Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID. |
opc-retry-token | string | A token that uniquely identifies a request so it can be retried in case of a timeout or server error without risk of executing that same action again. Retry tokens expire after 24 hours, but can be invalidated before then due to conflicting operations (e.g., if a resource has been deleted and purged from the system, then a retry of the original creation request may be rejected). |
SELECT examples​
- get
- list
Gets the specified SSL cipher suite's configuration information.
SELECT
name,
ciphers
FROM oci.load_balancer.ssl_cipher_suites
WHERE loadBalancerId = '{{ loadBalancerId }}' -- required
AND name = '{{ name }}' -- required
AND region = '{{ region }}' -- required
AND opc-request-id = '{{ opc-request-id }}'
;
Lists all SSL cipher suites associated with the specified load balancer.
SELECT
name,
ciphers
FROM oci.load_balancer.ssl_cipher_suites
WHERE loadBalancerId = '{{ loadBalancerId }}' -- required
AND region = '{{ region }}' -- required
AND opc-request-id = '{{ opc-request-id }}'
;
INSERT examples​
- create
- Manifest
Creates a custom SSL cipher suite.
INSERT INTO oci.load_balancer.ssl_cipher_suites (
ciphers,
name,
loadBalancerId,
region,
opc-request-id,
opc-retry-token
)
SELECT
'{{ ciphers }}' /* required */,
'{{ name }}' /* required */,
'{{ loadBalancerId }}',
'{{ region }}',
'{{ opc-request-id }}',
'{{ opc-retry-token }}'
;
# Description fields are for documentation purposes
- name: ssl_cipher_suites
props:
- name: loadBalancerId
value: "{{ loadBalancerId }}"
description: Required parameter for the ssl_cipher_suites resource.
- name: region
value: "{{ region }}"
description: Required parameter for the ssl_cipher_suites resource.
- name: ciphers
value:
- "{{ ciphers }}"
description: |
A list of SSL ciphers the load balancer must support for HTTPS or SSL connections.
The following ciphers are valid values for this property:
* __TLSv1.3 ciphers__
"TLS_AES_128_GCM_SHA256"
"TLS_AES_256_GCM_SHA384"
"TLS_CHACHA20_POLY1305_SHA256"
"TLS_AES_128_CCM_SHA256"
"TLS_AES_128_CCM_8_SHA256"
* __TLSv1.2 ciphers__
"AES128-GCM-SHA256"
"AES128-SHA256"
"AES256-GCM-SHA384"
"AES256-SHA256"
"DH-DSS-AES128-GCM-SHA256"
"DH-DSS-AES128-SHA256"
"DH-DSS-AES256-GCM-SHA384"
"DH-DSS-AES256-SHA256"
"DH-RSA-AES128-GCM-SHA256"
"DH-RSA-AES128-SHA256"
"DH-RSA-AES256-GCM-SHA384"
"DH-RSA-AES256-SHA256"
"DHE-DSS-AES128-GCM-SHA256"
"DHE-DSS-AES128-SHA256"
"DHE-DSS-AES256-GCM-SHA384"
"DHE-DSS-AES256-SHA256"
"DHE-RSA-AES128-GCM-SHA256"
"DHE-RSA-AES128-SHA256"
"DHE-RSA-AES256-GCM-SHA384"
"DHE-RSA-AES256-SHA256"
"ECDH-ECDSA-AES128-GCM-SHA256"
"ECDH-ECDSA-AES128-SHA256"
"ECDH-ECDSA-AES256-GCM-SHA384"
"ECDH-ECDSA-AES256-SHA384"
"ECDH-RSA-AES128-GCM-SHA256"
"ECDH-RSA-AES128-SHA256"
"ECDH-RSA-AES256-GCM-SHA384"
"ECDH-RSA-AES256-SHA384"
"ECDHE-ECDSA-AES128-GCM-SHA256"
"ECDHE-ECDSA-AES128-SHA256"
"ECDHE-ECDSA-AES256-GCM-SHA384"
"ECDHE-ECDSA-AES256-SHA384"
"ECDHE-RSA-AES128-GCM-SHA256"
"ECDHE-RSA-AES128-SHA256"
"ECDHE-RSA-AES256-GCM-SHA384"
"ECDHE-RSA-AES256-SHA384"
* __TLSv1 ciphers also supported by TLSv1.2__
"AES128-SHA"
"AES256-SHA"
"CAMELLIA128-SHA"
"CAMELLIA256-SHA"
"DES-CBC3-SHA"
"DH-DSS-AES128-SHA"
"DH-DSS-AES256-SHA"
"DH-DSS-CAMELLIA128-SHA"
"DH-DSS-CAMELLIA256-SHA"
"DH-DSS-DES-CBC3-SHAv"
"DH-DSS-SEED-SHA"
"DH-RSA-AES128-SHA"
"DH-RSA-AES256-SHA"
"DH-RSA-CAMELLIA128-SHA"
"DH-RSA-CAMELLIA256-SHA"
"DH-RSA-DES-CBC3-SHA"
"DH-RSA-SEED-SHA"
"DHE-DSS-AES128-SHA"
"DHE-DSS-AES256-SHA"
"DHE-DSS-CAMELLIA128-SHA"
"DHE-DSS-CAMELLIA256-SHA"
"DHE-DSS-DES-CBC3-SHA"
"DHE-DSS-SEED-SHA"
"DHE-RSA-AES128-SHA"
"DHE-RSA-AES256-SHA"
"DHE-RSA-CAMELLIA128-SHA"
"DHE-RSA-CAMELLIA256-SHA"
"DHE-RSA-DES-CBC3-SHA"
"DHE-RSA-SEED-SHA"
"ECDH-ECDSA-AES128-SHA"
"ECDH-ECDSA-AES256-SHA"
"ECDH-ECDSA-DES-CBC3-SHA"
"ECDH-ECDSA-RC4-SHA"
"ECDH-RSA-AES128-SHA"
"ECDH-RSA-AES256-SHA"
"ECDH-RSA-DES-CBC3-SHA"
"ECDH-RSA-RC4-SHA"
"ECDHE-ECDSA-AES128-SHA"
"ECDHE-ECDSA-AES256-SHA"
"ECDHE-ECDSA-DES-CBC3-SHA"
"ECDHE-ECDSA-RC4-SHA"
"ECDHE-RSA-AES128-SHA"
"ECDHE-RSA-AES256-SHA"
"ECDHE-RSA-DES-CBC3-SHA"
"ECDHE-RSA-RC4-SHA"
"IDEA-CBC-SHA"
"KRB5-DES-CBC3-MD5"
"KRB5-DES-CBC3-SHA"
"KRB5-IDEA-CBC-MD5"
"KRB5-IDEA-CBC-SHA"
"KRB5-RC4-MD5"
"KRB5-RC4-SHA"
"PSK-3DES-EDE-CBC-SHA"
"PSK-AES128-CBC-SHA"
"PSK-AES256-CBC-SHA"
"PSK-RC4-SHA"
"RC4-MD5"
"RC4-SHA"
"SEED-SHA"
example: `["ECDHE-RSA-AES256-GCM-SHA384","ECDHE-ECDSA-AES256-GCM-SHA384","ECDHE-RSA-AES128-GCM-SHA256"]`
- name: name
value: "{{ name }}"
description: |
A friendly name for the SSL cipher suite. It must be unique and it cannot be changed.
**Note:** The name of your user-defined cipher suite must not be the same as any of Oracle's predefined or
reserved SSL cipher suite names:
* oci-default-ssl-cipher-suite-v1
* oci-modern-ssl-cipher-suite-v1
* oci-compatible-ssl-cipher-suite-v1
* oci-wider-compatible-ssl-cipher-suite-v1
* oci-customized-ssl-cipher-suite
* oci-default-http2-ssl-cipher-suite-v1
* oci-default-http2-tls-13-ssl-cipher-suite-v1
* oci-default-http2-tls-12-13-ssl-cipher-suite-v1
* oci-tls-13-recommended-ssl-cipher-suite-v1
* oci-tls-12-13-wider-ssl-cipher-suite-v1
* oci-tls-11-12-13-wider-ssl-cipher-suite-v1
example: `example_cipher_suite`
- name: opc-request-id
value: "{{ opc-request-id }}"
description: Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
description: Unique Oracle-assigned identifier for the request. If you need to contact Oracle about a particular request, please provide the request ID.
- name: opc-retry-token
value: "{{ opc-retry-token }}"
description: A token that uniquely identifies a request so it can be retried in case of a timeout or server error without risk of executing that same action again. Retry tokens expire after 24 hours, but can be invalidated before then due to conflicting operations (e.g., if a resource has been deleted and purged from the system, then a retry of the original creation request may be rejected).
description: A token that uniquely identifies a request so it can be retried in case of a timeout or server error without risk of executing that same action again. Retry tokens expire after 24 hours, but can be invalidated before then due to conflicting operations (e.g., if a resource has been deleted and purged from the system, then a retry of the original creation request may be rejected).
UPDATE examples​
- update
Updates an existing SSL cipher suite for the specified load balancer.
UPDATE oci.load_balancer.ssl_cipher_suites
SET
ciphers = '{{ ciphers }}'
WHERE
loadBalancerId = '{{ loadBalancerId }}' --required
AND name = '{{ name }}' --required
AND region = '{{ region }}' --required
AND ciphers = '{{ ciphers }}' --required
AND opc-request-id = '{{ opc-request-id}}'
AND opc-retry-token = '{{ opc-retry-token}}';
DELETE examples​
- delete
Deletes an SSL cipher suite from a load balancer.
DELETE FROM oci.load_balancer.ssl_cipher_suites
WHERE loadBalancerId = '{{ loadBalancerId }}' --required
AND name = '{{ name }}' --required
AND region = '{{ region }}' --required
AND opc-request-id = '{{ opc-request-id }}'
;