Configuration method and device of cipher suite

Abstract

The embodiment of the invention discloses a configuration method and a device of a cipher suite. The configuration method of a cipher suite comprises the steps: obtaining a preset cipher suite list, wherein the cipher suite list comprises a region code list item, and one cipher suite is uniquely determined by a suite serial number and a region code together; configuring the region code, and selecting the cipher suite corresponding to the region code according to the region code in the cipher suite list. The embodiment selects the cipher suite corresponding to the region code according to the configured region code in the obtained cipher suite list so as to realize the selection of the cipher suite according to the region code, solves the problem that the cipher suite of equipment in different regions can conflict with each other, and increases the flexibility of the equipment.

Description

technical field [0001] The embodiments of the present invention relate to the technical field of network communication, and in particular to a method and device for configuring a cipher suite. Background technique [0002] With the rapid development and popularization of the Internet, more and more businesses rely on network technology, such as e-commerce, e-government and so on. With the development of Web (web page) applications, the increase of remote access, and the highlight of network security issues, VPN (Virtual Private Network, virtual private network) equipment has become a hot spot in the security product market. VPN devices can be classified into SSL (Secure Socket Layer, Secure Socket Layer) VPN, IPsec (Internet Protocol Security, Internet Protocol Security) VPN, etc. according to different technical protocols implemented. Among them, SSL VPN is based on the SSL protocol to realize the application of virtual private network. [0003] IETF (Internet Engineering...

AI Technical Summary

Problems solved by technology

However, due to the sensitivity of cryptographic issues, some countries or regions have their own special cryptographic algorithm requirements, and these cryptographic algorithms are different, and when each country or region numbers its own, it may cause conflicts in the numbering of these cryptographic algorithm suites. For example, two different countries have stipulated the same number, but this number represents different cipher algorithm suites, which will cause the SSL VPN devices sold in these two countries to be incompatible and must be customized and modified

[0006] In the process of realizing the present invention, the inventor found that the prior art has at least the following problems: when the numbers of cipher suites stipulated by two different countries conflict, the SSL VPN equipment sold to one of the countries cannot be sold to the other country, and it is necessary to Modifications are made on the equipment according to different countries, which increases the complexity and maintenance cost of the equipment

Images