openssl ciphers

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

openssl ciphers

Dmitry Belyavsky
Hello!

man openssl ciphers:

=========
Lists of cipher suites can be combined in a single cipher string using
the + character. This is used as a logical and operation. For example
SHA1+DES represents all cipher suites containing the SHA1 and the DES
algorithms.
=========

What about call for openssl ciphers AES+DES?

Using specification, it shouldn't return any cipher suite. But it
returns both DES and AES cipher suites. What is wrong?


--
SY, Dmitry Belyavsky (ICQ UIN 11116575)

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

RE: openssl ciphers

Steven Reddie
Which version are you using?  0.9.8 does what I'd expect:

        $ openssl ciphers AES+DES
        Error in cipher list
        3312:error:144020B9:SSL routines:SSL_CTX_set_cipher_list:no cipher
match:ssl_lib.c:1167:

Steven

-----Original Message-----
From: [hidden email]
[mailto:[hidden email]] On Behalf Of Dmitry Belyavsky
Sent: Monday, 29 August 2005 10:18 PM
To: [hidden email]
Subject: openssl ciphers

Hello!

man openssl ciphers:

=========
Lists of cipher suites can be combined in a single cipher string using the +
character. This is used as a logical and operation. For example
SHA1+DES represents all cipher suites containing the SHA1 and the DES
algorithms.
=========

What about call for openssl ciphers AES+DES?

Using specification, it shouldn't return any cipher suite. But it returns
both DES and AES cipher suites. What is wrong?


--
SY, Dmitry Belyavsky (ICQ UIN 11116575)

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

RE: openssl ciphers

Dmitry Belyavsky
Hello!

On Mon, 29 Aug 2005, Steven Reddie wrote:

> Which version are you using?  0.9.8 does what I'd expect:
>
> $ openssl ciphers AES+DES
> Error in cipher list
> 3312:error:144020B9:SSL routines:SSL_CTX_set_cipher_list:no cipher
> match:ssl_lib.c:1167:

Thank you. The result was from
OpenSSL 0.9.7e 25 Oct 2004

--
SY, Dmitry Belyavsky (ICQ UIN 11116575)

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]
Reply | Threaded
Open this post in threaded view
|

Re: openssl ciphers

Nils Larsch
In reply to this post by Steven Reddie
Steven Reddie wrote:
> Which version are you using?  0.9.8 does what I'd expect:
>
> $ openssl ciphers AES+DES
> Error in cipher list
> 3312:error:144020B9:SSL routines:SSL_CTX_set_cipher_list:no cipher
> match:ssl_lib.c:1167:

yep, this has been fixed in OpenSSL_0_9_7-stable and above see [1].

Cheers,
Nils

[1] https://www.aet.tu-cottbus.de/rt2/Ticket/Display.html?id=1005
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [hidden email]
Automated List Manager                           [hidden email]