I need to exclusively use the ciphersuites of TLS_DH_anon_WITH_AES_256_CBC_SHA.

So, I called ctx = SSL_CTX_new(TLSv1_method());   
and then called SSL_CTX_set_cipher_list(ctx, "ADH-AES256-SHA");

Later, I want to make sure this ciphersuite is used exclusively, I called SSL_CIPHER_description, but actaully I got two:

SSL cipher desc: ADH-AES256-SHA          SSLv3 Kx=DH       Au=None Enc=AES(256)  Mac=SHA1

SSL cipher desc: ADH-AES128-SHA          SSLv3 Kx=DH       Au=None Enc=AES(128)  Mac=SHA1

So, from these descriptions, SSLv3 is used instead of TLSv1, and AES(128) may be used instaed of AES(256).

Any suggestions? Thank you for your attention.


Shicai


Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail Beta.

Reply via email to