It seems I caught a small break looking into this. This works and other 'older' DLTS ciphers like AES-128 work too: --dtls-ciphers='DES-CBC3-SHA' => is identified as DTLS 1.0 (OpenSSL pre 0.9.8f) in Wireshark These do not work when using the option: --dtls-ciphers='AES-256-GCM' --dtls-ciphers='AES256-GCM-SHA384' The GCM cipher is the one the server negotiates correctly when not using the --dtls-ciphers option. So could it be that the option does not work with DTLS 1.2?