Re: Adding OpenSSL ciphersuites at compile time

2018-04-05 Thread Neil Craig
Awesome, that¹s exactly what I am looking for, thanks Maxim - much appreciated! Neil Craig Lead Technical Architect BBC Design + Engineering | OTG Broadcast Centre, London W12 7TQ | BC4 A3 On 05/04/2018, 19:52, "nginx-devel on behalf of Maxim Dounin" wrote: >Hello! > >On Thu, Apr 05, 2018 a

Re: Adding OpenSSL ciphersuites at compile time

2018-04-05 Thread Maxim Dounin
Hello! On Thu, Apr 05, 2018 at 06:39:45PM +, Neil Craig wrote: > Hi Thomas > > Thanks for your reply. What you outline is essentially what I > want to do – I am statically compiling nginx against a specific > openssl version and I want to be able to re-enable 3DES > ciphersuites which are

Re: Adding OpenSSL ciphersuites at compile time

2018-04-05 Thread Neil Craig
l@nginx.org<mailto:nginx-devel@nginx.org>" mailto:nginx-devel@nginx.org>>, Neil Craig mailto:neil.cr...@bbc.co.uk>> Subject: Re: Adding OpenSSL ciphersuites at compile time If I remember correctly, the available cipher suites to NGINX are based on what's compiled into the und

Re: Adding OpenSSL ciphersuites at compile time

2018-04-05 Thread Thomas Ward via nginx-devel
If I remember correctly, the available cipher suites to NGINX are based on what's compiled into the underlying SSL libraries that NGINX builds against.  So if the underlying OpenSSL has access to ChaCha ciphers in its ciphers that're compiled into it, then NGINX can utilize those ChaCha ciphers. I

Adding OpenSSL ciphersuites at compile time

2018-04-05 Thread Neil Craig
Hi I build a customised nginx binary for my project, this is statically compiled against openssl (via —with-openssl). Does anyone know if it’s possible to add a configure option to enable specific ciphersuites? The OpenSSL docs are here: https://wiki.openssl.org/index.php/Compilation_and_Instal