Document new ciphers attribute. This closes
@@ -49,6 +49,7 @@ You must have the following files in PEM format:
----
sslProfile {
name: _NAME_
+ ciphers: _CIPHERS_
certDb: _PATH_.pem
certFile: _PATH_.pem
keyFile: _PATH_.pem
@@ -66,6 +67,17 @@ For example:
name: router-ssl-profile
----
+`ciphers`:: The SSL cipher suites that can be used by this SSL/TLS profile. If certain ciphers are unsuitable for your environment, you can use this attribute to restrict them from being used.
++
+To enable a cipher list, enter one or more cipher strings separated by colons (`:`). For example:
++
+[options="nowrap"]
+----
+ciphers: ALL:!aNULL:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP
+----
++
+To see the full list of available ciphers, use the `openssl ciphers` command. For more information about each cipher, see the link:https://www.openssl.org/docs/manmaster/man1/ciphers.html[ciphers man page^].
+
`certDb`:: The absolute path to the database that contains the public certificates of trusted certificate authorities (CA).
+
For example:
