Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: disable weak ciphers

Table of Contents

...

Update HostName and MgtHostName with the IP address of the API Manager server in the  <WSO2_OBAM_HOME>/repository/conf/carbon.xml file.

Code Block
languagexml
<HostName><WSO2_OB_APIM_HOST></HostName>
<MgtHostName><WSO2_OB_APIM_HOST></MgtHostName>

Disabling weak ciphers

A cipher is an algorithm for performing encryption or decryption. When you set the sslprotocol of your server to TLS, the TLS and the default ciphers get enabled without considering the strength of the ciphers. This is a security risk as weak ciphers, also known as EXPORT ciphers, can make your system vulnerable to attacks. To prevent these types of security attacks, it is encouraged to disable the weak ciphers. 

Refer to Disabling weak ciphers in the WSO2 Administration Guide and disable weak ciphers.