List of supported Ciphers for CVP 11.6?

[MattCarlin]

I'm trying to find a list of supported ciphers on CVP and VVB 11.6. In the documentation, all I can find is the default cipher of TLS_RSA_WITH_AES_128_CBC_SHA. I've been asked if there are any, more secure, ciphers available. Specifically, the customer is looking for AES 256. I'm not able to find any information either way in CVP documents.

CUCM has a nice list in their 11.0 security guide: https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/security/11_0_1/secugd/CUCM_BK_C1A78C1D_00_cucm-security-guide-1101/encrypted_phone_configuration_file_setup.html#CUCM_RF_A1AC4601_00 . Is there any similar documentation for CVP and VVB?

[geoff · Accepted solution]

You will see the ciphers that CVP VXML supports in Tomcat\conf\server.xml

• TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
• TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
• TLS_RSA_WITH_AES_256_CBC_SHA
• TLS_RSA_WITH_AES_128_CBC_SHA
• TLS_RSA_WITH_AES_128_CBC_SHA256

Regards,

Geoff