# TLS configuration file used when running Mule in FIPS mode. To use this configuration,
# you must set the "mule.security.model" property to "fips140-2" in the wrapper.conf file.

# Sockets will only use cipher suites from this list.

enabledCipherSuites=TLS_DHE_DSS_WITH_AES_128_CBC_SHA,          \
                    TLS_DHE_DSS_WITH_AES_256_CBC_SHA,          \
                    TLS_DHE_RSA_WITH_AES_128_CBC_SHA,          \
                    TLS_DHE_RSA_WITH_AES_256_CBC_SHA,          \
                    TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,       \
                    TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,       \
                    TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,       \
                    TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,      \
                    TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,   \
                    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,      \
                    TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,   \
                    TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,   \
                    TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,        \
                    TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,     \
                    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,        \
                    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,     \
                    TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,     \
                    TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,         \
                    TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,         \
                    TLS_AES_128_GCM_SHA256,                    \
                    TLS_AES_256_GCM_SHA384,                    \
                    TLS_AES_128_CCM_SHA256,                    \
                    TLS_AES_128_CCM_8_SHA256
