Re: [openssl-users] How to disable all EXPORT Ciphers?

2015-03-10 Thread Christian Georg
Hi Viktor, please help me to understand your sentence: "Note that doing so does not address the FREAK CVE in SSL clients. Even with EXPORT ciphers disabled they are still vulnerable, unless patched!" I understand that the downgrading of the ciphersuites is a bug in the library that sh

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-09 Thread Christian Georg
: Freitag, 6. März 2015 21:05 An: openssl-users@openssl.org Betreff: Re: [openssl-users] Getting info on the ciphers supported by a client On Fri, Mar 06, 2015, Christian Georg wrote: > > Any recommendations on how I can solve my issues without changing the openssl > code and add this

Re: [openssl-users] Getting info on the ciphers supported by a client

2015-03-09 Thread Christian Georg
: Re: [openssl-users] Getting info on the ciphers supported by a client On Fri, Mar 6, 2015 at 2:05 PM, Christian Georg mailto:christian.ge...@cologne-intelligence.de>> wrote: Hi all, Christian, I might be able to save you some time. I wrote an SSL/TLS client test for the SSL Labs web sit

[openssl-users] Getting info on the ciphers supported by a client

2015-03-06 Thread Christian Georg
Hi all, I am trying to get detailed info on the protocols and cipher suites supported by a client app. Main goal is to verify that the constraints on protocols versions and cipher suites we are using within an app are working correctly. (so it is not about the cipher suites that are theoretical