In fact I'm not using OpenSSL library directly. I use an open source library Indy which in turn makes use of OpenSSL. I discovered that POP3 servers that use DES-CBC3-SHA work correctly with my program, and the server that fails uses RC4-SHA. I got what you had said about Diffie-Hellman parameters, but it means that I will need to modify Indy (the lib I'm using) which is not a very simple task. I will report to this list if I get any positive results.
----- Original Message ----- From: "mclellan, dave" <[EMAIL PROTECTED]> To: <openssl-users@openssl.org> Sent: Sunday, January 23, 2005 3:12 PM Subject: RE: SSL error: no cipher list > On my first SSL implementation, I struggled with this specific error. The > Diffie-Hellman parameters for key exchange must be initialized, and if I > remember correctly they weren't in my case. > > You must set up a callback to your code where it initializes DH parms. Call > SSL_CTX_set_tmp_dh_callback to establish your callback. In order to see > what to do inside it, visit the www.openssl.org/docs/ssl/ssl.html. There's > an example here: > > http://www.openssl.org/docs/ssl/SSL_CTX_set_tmp_dh_callback.html# > > I hope this doesn't steer you off the course. > > Dave McLellan - Consulting Software Engineer > EMC Corporation > 228 South St. > Hopkinton MA 01748 > phone: 508-249-1257 > fax 508-497-8030 > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Henry Su > Sent: Friday, January 21, 2005 3:11 PM > To: openssl-users@openssl.org > Subject: RE: SSL error: no cipher list > > No sure if you have set it or not. If not, you can try following example: > > #define CIPHER_LIST "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH" > > SSL_CTX_set_cipher_list(ctx, CIPHER_LIST) ; > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Yuriy Synov > Sent: Friday, January 21, 2005 6:15 AM > To: openssl > Subject: SSL error: no cipher list > > > Dear All, > > I get this error with one POP3 server when I call function SSL_connect: > > error:1406D0B8:SSL routines:GET_SERVER_HELLO:no cipher list > > Could someone tell me what it means and how I can get rid of it? TIA > > Best regards, > > Yuriy Synov. > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
