# Best practices cipher suites

**URL:** <https://community.wowza.com/t/best-practices-cipher-suites/50391>\
**Category:** Wowza Streaming Engine\
**Created:** [December 18, 2017, 2:16pm UTC](https://community.wowza.com/t/best-practices-cipher-suites/50391 "2017-12-18T14:16:25Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Thomas\_Ebert](https://avatars.discourse-cdn.com/v4/letter/t/90db22/32.png) [@Thomas\_Ebert](https://community.wowza.com/u/Thomas_Ebert)\
**Post date:** [December 18, 2017, 2:16pm UTC](https://community.wowza.com/t/best-practices-cipher-suites/50391/1 "2017-12-18T14:16:25Z")

</div>

I would like to define the cipher suites like this in my VHost.xml:

```auto
<CipherSuites>TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,TLS_DHE_RSA_WITH_AES_128_GCM_SHA256,TLS_DHE_RSA_WITH_AES_256_GCM_SHA384,TLS_DHE_RSA_WITH_AES_128_CBC_SHA,TLS_DHE_RSA_WITH_AES_256_CBC_SHA,TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,TLS_DHE_RSA_WITH_AES_256_CBC_SHA256</CipherSuites>
<Protocols>TLSv1,TLSv1.1,TLSv1.2</Protocols>

```

as described here [https://github.com/ssllabs/research/wiki/SSL-and-TLS-Deployment-Best-Practices#23-use-secure-cipher-suites](https://github.com/ssllabs/research/wiki/SSL-and-TLS-Deployment-Best-Practices#23-use-secure-cipher-suites)

Now, after applying this configuration, Wowza doesn’t even respond to https-requests anymore. How can I configure cipher suites in a best practice way?

---

<div class="post-metadata">

**Author:** ![Alberto\_Cabaleiro](https://avatars.discourse-cdn.com/v4/letter/a/a9adbd/32.png) [@Alberto\_Cabaleiro](https://community.wowza.com/u/Alberto_Cabaleiro)\
**Post date:** [February 20, 2020, 10:04am UTC](https://community.wowza.com/t/best-practices-cipher-suites/50391/2 "2020-02-20T10:04:09Z")

</div>

Hello Thomas,

Thanks for posting this in the forum. I’d recommend having a look at this article describing best practices to optimise SSL configuration: [https://www.wowza.com/docs/how-to-improve-ssl-configuration](https://www.wowza.com/docs/how-to-improve-ssl-configuration)

In case any issues persist after reviewing the above, please feel free to open a support ticket ([https://www.wowza.com/support/open-ticket](https://www.wowza.com/support/open-ticket)) providing your server /conf and /logs folders and we’ll be glad to have a deeper look into it: [https://www.wowza.com/docs/how-to-create-a-compressed-zip-file-in-windows-os-x-and-linux](https://www.wowza.com/docs/how-to-create-a-compressed-zip-file-in-windows-os-x-and-linux)

Regards,

Alberto Cabaleiro

Wowza Support Engineer