Missing ciphers

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




On 05/11/15 00:01, Viktor Dukhovni wrote:
> On Wed, Nov 04, 2015 at 03:53:27PM -0800, Steve Topletz wrote:
> 
>> I find that I'm missing many ciphers when I interrogate my openssl service.
>>
>> Running v1.0.2d 'openssl s_server -cert my.cer -key my.key -accept 443
>> -cipher TLSv1.2' offers only about 1/3 of the ciphers listed in 'openssl
>> ciphers -V TLSv1.2'.
>>
>> How do I get the rest of these ciphers enabled?
> 
> Only ciphers found in the "DEFAULT" cipherlist that are compatible
> with your server certificate algorithm will be enabled in your
> server.

Note that in this case an explicit cipher string of TLSv1.2 has been
set. This *includes* some ciphersuites that are not in DEFAULT, e.g.
some eNULL based ciphersuites

Matt


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux