Re: Enabling RC4 from command line tools in OpenSSL 3.1

["'Ladd, Watson' via openssl-users" <openssl-users@xxxxxxxxxxx>]

Thank you that worked.

---

From: openssl-users@xxxxxxxxxxx <openssl-users@xxxxxxxxxxx> on behalf of Viktor Dukhovni <openssl-users@xxxxxxxxxxxx>
Sent: Friday, September 6, 2024 12:39:54 PM
To: openssl-users@xxxxxxxxxxx
Subject: Re: Enabling RC4 from command line tools in OpenSSL 3.1

 

!-------------------------------------------------------------------|
  This Message Is From an External Sender
  This message came from outside your organization.
|-------------------------------------------------------------------!

On Fri, Sep 06, 2024 at 06:56:41PM +0000, 'Ladd, Watson' via openssl-users wrote:
>
> That was a very good idea, but sadly still doesn't work
>
>
> DYLD_LIBRARY_PATH=`cd .. && pwd` ./openssl s_client -tls1 -cipher RC4  -provider-path /Users/wladd/code/openssl/providers/ -provider legacy
>
> 004CA1EE01000000:error:0A0000A1:SSL routines:SSL_CTX_new_ex:library has no ciphers:ssl/ssl_lib.c:3474
>
>
> Suspect something went awry in configuring compiling that.

You still need the default provider for the KEX and MAC algorithms, ...

    $ ./util/wrap.pl ./apps/openssl ciphers -tls1_2 -s -v -provider legacy RC4:@SECLEVEL=0
    80BBAB49927F0000:error:0A0000A1:SSL routines:SSL_CTX_new_ex:library has no ciphers:ssl/ssl_lib.c:3977:

    $ ./util/wrap.pl ./apps/openssl ciphers -tls1_2 -s -v -provider default -provider legacy RC4:@SECLEVEL=0
    ECDHE-ECDSA-RC4-SHA            TLSv1   Kx=ECDH     Au=ECDSA Enc=RC4(128)               Mac=SHA1
    ECDHE-RSA-RC4-SHA              TLSv1   Kx=ECDH     Au=RSA   Enc=RC4(128)               Mac=SHA1
    AECDH-RC4-SHA                  TLSv1   Kx=ECDH     Au=None  Enc=RC4(128)               Mac=SHA1
    ADH-RC4-MD5                    SSLv3   Kx=DH       Au=None  Enc=RC4(128)               Mac=MD5
    RC4-SHA                        SSLv3   Kx=RSA      Au=RSA   Enc=RC4(128)               Mac=SHA1
    RC4-MD5                        SSLv3   Kx=RSA      Au=RSA   Enc=RC4(128)               Mac=MD5

--
    Viktor.

--
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe@xxxxxxxxxxx.
To view this discussion on the web visit https://urldefense.com/v3/__https://groups.google.com/a/openssl.org/d/msgid/openssl-users/ZttaikEHT8_RMcN6*40chardros.imrryr.org__;JQ!!GjvTz_vk!RdBT-UozixIVLcoSPJluewa7IGgy7ihRVlkaAG7c1bJq0uZ1uyxx34QjeyupX0FchvekBtral09kFYVsakicW7Qn$ .

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe@xxxxxxxxxxx.
To view this discussion on the web visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/7a7e4027ddb34cf6a791f4697651626e%40akamai.com.