Re: Enabling RC4 from command line tools in OpenSSL 3.1

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Sep 06, 2024 at 06:56:41PM +0000, 'Ladd, Watson' via openssl-users wrote:
> 
> That was a very good idea, but sadly still doesn't work
> 
> 
> DYLD_LIBRARY_PATH=`cd .. && pwd` ./openssl s_client -tls1 -cipher RC4  -provider-path /Users/wladd/code/openssl/providers/ -provider legacy
> 
> 004CA1EE01000000:error:0A0000A1:SSL routines:SSL_CTX_new_ex:library has no ciphers:ssl/ssl_lib.c:3474
> 
> 
> Suspect something went awry in configuring compiling that.

You still need the default provider for the KEX and MAC algorithms, ...

    $ ./util/wrap.pl ./apps/openssl ciphers -tls1_2 -s -v -provider legacy RC4:@SECLEVEL=0
    80BBAB49927F0000:error:0A0000A1:SSL routines:SSL_CTX_new_ex:library has no ciphers:ssl/ssl_lib.c:3977:

    $ ./util/wrap.pl ./apps/openssl ciphers -tls1_2 -s -v -provider default -provider legacy RC4:@SECLEVEL=0
    ECDHE-ECDSA-RC4-SHA            TLSv1   Kx=ECDH     Au=ECDSA Enc=RC4(128)               Mac=SHA1
    ECDHE-RSA-RC4-SHA              TLSv1   Kx=ECDH     Au=RSA   Enc=RC4(128)               Mac=SHA1
    AECDH-RC4-SHA                  TLSv1   Kx=ECDH     Au=None  Enc=RC4(128)               Mac=SHA1
    ADH-RC4-MD5                    SSLv3   Kx=DH       Au=None  Enc=RC4(128)               Mac=MD5
    RC4-SHA                        SSLv3   Kx=RSA      Au=RSA   Enc=RC4(128)               Mac=SHA1
    RC4-MD5                        SSLv3   Kx=RSA      Au=RSA   Enc=RC4(128)               Mac=MD5

-- 
    Viktor.

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe@xxxxxxxxxxx.
To view this discussion on the web visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/ZttaikEHT8_RMcN6%40chardros.imrryr.org.



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux