TLS/SSL Encryption Algorithms

Discussion about security topics in WinCC OA!
Search

Post Reply
6 posts • Page 1 of 1
vsolomonidou
Posts: 23
Joined: Mon Mar 02, 2015 11:33 am

TLS/SSL Encryption Algorithms

Post by vsolomonidou »

Hi,

What encryption algorithms does the multiplexing proxy use for TLS/SSL communication? What key length is used?

Thanks,

Vaso

User avatar
adaneau
Posts: 272
Joined: Tue Feb 21, 2012 9:49 am

Re: TLS/SSL Encryption Algorithms

Post by adaneau »

Hi Vaso,

Considering that the following command lines are used for certificate and key creation :

openssl genrsa -aes256 -out intermediate/private/www.example.com.key.pem 2048

openssl req -config intermediate/openssl.cnf -key intermediate/private/www.example.com.key.pem -new -sha256 -out intermediate/csr/www.example.com.csr.pem -subj roleOccupant = "para"

I would say key length is 2048 and algorithm is AES256.

BR
Alex

vsolomonidou
Posts: 23
Joined: Mon Mar 02, 2015 11:33 am

Re: TLS/SSL Encryption Algorithms

Post by vsolomonidou »

Really helpful.

Many thanks Alex.

User avatar
leoknipp
Posts: 2509
Joined: Tue Aug 24, 2010 7:28 pm

Re: TLS/SSL Encryption Algorithms

Post by leoknipp »

The information given by "adenaeu" is written in the documentation for the example how to create own certificates via the command line.

I checked the documentation for WinCC OA 3.17 and for the creation of the intermediate key the following command is described as an example:
openssl genrsa -aes256 -out intermediate/private/intermediate.key.pem 4096

Then the key length is 4096.

For me it looks like the certificates you are using define the type of encryption.

Normally you are using pre defined certificates you got from your system administration. Creating own certificates using the command line is not the standard use case.

Best Regards
Leopold Knipp
Senior Support Specialist

vsolomonidou
Posts: 23
Joined: Mon Mar 02, 2015 11:33 am

Re: TLS/SSL Encryption Algorithms

Post by vsolomonidou »

Hi Leopold,

Thanks for the response. Does the same apply to version 3.15, as this is the version I'm interested in?

In terms if the pre-defined certificates (the default certificates that are generated when creating a project), is the same AES256 algorithm used and with what length ?

Many thanks,
Vaso

User avatar
leoknipp
Posts: 2509
Joined: Tue Aug 24, 2010 7:28 pm

Re: TLS/SSL Encryption Algorithms

Post by leoknipp »

Please take into account that in productive system you should use your own certificates.
When the default certificates are used everyone who has a WinCC OA installation can connect as the same certificates are used.
Using the default certificates does not increase the level of security in a project.

The information given in the previous posts were just the information copied from the WinCC OA Documentation for the example how to create certificates.
You can look at the documentation in 3.15 which examples are described there.

Best Regards
Leopold Knipp
Senior Support Specialist

Post Reply
6 posts • Page 1 of 1