Re: Considering C# OpenSSL openssl-net-master

["J. J. Farrell" <jeremy.farrell@xxxxxxxxxx>]

On 26/07/2017 20:58, Jakob Bohm wrote:

On 25/07/2017 19:00, Salz, Rich via openssl-users wrote:

If you want to use those ciphers, you need to set SECLEVEL=0 when you specify the ciphers.

When did TLS_RSA_WITH_AES_128_CBC_SHA256 and higher become
"low security"?

It looks like the client is an older product (ECDH only offered
for ECDSA certs, classic DH not offered, no algorithms above
128 bits).

So I guess the OP just needs to check if he is using an empty
cipher string or something silly like that.

The OP said he was testing his "Tls Client that supports TLS starting from version 1.2 and all the cipher suites". Perhaps he's found his first bug, since the client isn't offering all the TLS 1.2 cipher suites ...

-- 
J. J. Farrell
Not speaking for Oracle

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users