What ciphers does CA LDAP support?

Products

• LDAP SERVER FOR Z/OS
• ACF2
• Top Secret
• ACF2 - MISC
• ACF2 - z/OS

Issue/Introduction

What are supported ciphers for CA LDAP on the Mainframe?

Environment

Release : 15.0

Component : LDAP Server for z/OS

Resolution

The cipher suites that are available are based on the IBM System SSL component. These can then be specified in slapd.conf for CA LDAP.

A list of examples are provided in the CA LDAP documentation under Customize the Slapd Configuration File > TLSCipherSuite 

Note that the list of ciphers in the documentation are just examples so that a site can appropriately make changes to the configuration file. The IBM System SSL component is what determines whether or not a cipher is supported, CA LDAP passes on the information for allowed ciphers to the IBM component.