TLSv1.3 ciphers not visible in CLI after re-adding
Applies to
- ONTAP 9.12.1
- TLSv1.3
Issue
After running the
security config show
command::*> security config modify -interface SSL -supported-cipher-suites TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256
TLS_CHACHA20_POLY1305_SHA256 is not showing among enabled ciphers:
::*> security config show
Cluster Supported FIPS Mode Protocols Supported Cipher Suites
---------- --------- ----------------------------------------------------------
false TLSv1.3, TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,
TLSv1.2 TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256