From ddc0339dd7ad21d9780f2ace0528cb05522dc2f8 Mon Sep 17 00:00:00 2001 From: Jarrod Johnson Date: Tue, 13 Oct 2026 08:16:14 -0400 Subject: [PATCH] Add strictness to TLS cipher list --- misc/setupnokia.sh | 1 + 1 file changed, 1 insertion(+) diff --git a/misc/setupnokia.sh b/misc/setupnokia.sh index 5b3d0ca0..5985d4e8 100644 --- a/misc/setupnokia.sh +++ b/misc/setupnokia.sh @@ -37,6 +37,7 @@ enter candidate exclusive / system json-rpc-server admin-state enable / system tls server-profile fullcert key "$(<$CERTDIR/key.pem)" / system tls server-profile fullcert certificate "$(<$CERTDIR/cert.pem)" +/ system tls server-profile fullcert cipher-list [ ecdhe-ecdsa-aes256-gcm-sha384 ] / system json-rpc-server network-instance mgmt https admin-state enable / system json-rpc-server network-instance mgmt https tls-profile fullcert commit save