Change cipher algo by default (CAMELLIA)

[djoole]

I would like FreeNAS to use AES256 instead of CAMELLIA during SSL communications

I tried to add the following lines in /usr/local/etc/lighttpd/lighttpd.conf :
ssl.use-sslv2 = "disable"
ssl.cipher-list = "TLSv1+HIGH !SSLv2 RC4+MEDIUM !aNULL !eNULL !3DES @STRENGTH"

But my HTTPS pages are still encrypted with CAMELLIA_256_CBC

Any idea on how to setup this?

 

[freenasSYS]

I am not sure if /usr/local/etc/lighttpd/lighttpd.conf would persist across reboots, but if it does that's fine.
Here is what works for me:

Add the following to /conf/base/etc/lighttpd/lighttpd.conf (insert near ssl engine)
◦ ssl.use-sslv2 = "disable"
◦ ssl.use-sslv3 = "disable"
◦ ssl.cipher-list = "HIGH !DSS !3DES !MD5 !aNULL !eNULL !AES128-SHA !CAMELLIA128-SHA !DHE-RSA-CAMELLIA128-SHA !DHE-RSA-AES128-SHA"

◦ Note: the above cipher-list must be all on one line (no new lines)

So you would probably have to do !CAMELLIA256-SHA to disable CAMELLIA