Setting ciphers in TSX Gateway

Thinstuff Support

2023-07-31

You can set a specific cipher in the configuration file (TsxTsGateWay.cfg) of TSX Gateway as following:

<server>
    <port>443</port>
    <maxConnections>30</maxConnections>
    <cipher>ALL:+HIGH:!EXPORT:!LOW:!MEDIUM</cipher>

The format can be found at https://www.openssl.org/docs/man1.0.2/man1/ciphers.html
It's simply an OpenSSL cipher string. It should be possible to disable RSA completely, by adding ":!RSA".

By default TLSv1 is disabled, all other are enabled.

To disable/enable enable TLSv1, TLSv1.1, TLSv1.2 or TSLv1.3 use following lines:

    <enableTLSv1>true</enableTLSv1>
    <enableTLSv1_1>false</enableTLSv1_1>
    <enableTLSv1_2>false</enableTLSv1_2>
    <enableTLSv1_3>false</enableTLSv1_3>

To change the configuration of TSX Gateway , please stop the service, modifiy the config file and reboot your machine.

Tags: ciphers, openssl, tsx gateway