On Thu, Feb 08, 2001 at 02:16:53PM -0800, Patrick Li wrote:
> I am implementing a SSL client.  Is SSL_set_cipher_list()  the only function
> call that I can use to specify the cipher suites supported by the SSL
> client?  Let say I want to disable all the non-exportable cipher suites at
> my client, I need to specify the list of exportable cipher suites in the
> SSL_set_cipher_list() function right?

Yes. You can either list all suites you want to support. For exportable
ciphers there already exists a shorcut: "EXPORT". So you might want:
 "EXPORT:!ADH:@STRENGTH"
to get all exportable ciphers (40 and 56 bits), no anonymous ciphers, finally
sorted by strength (stronger ciphers having higher priority).

Best regards,
        Lutz
-- 
Lutz Jaenicke                             [EMAIL PROTECTED]
BTU Cottbus               http://www.aet.TU-Cottbus.DE/personen/jaenicke/
Lehrstuhl Allgemeine Elektrotechnik                  Tel. +49 355 69-4129
Universitaetsplatz 3-4, D-03044 Cottbus              Fax. +49 355 69-4153
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to