Re: checking for enable-weak-ssl-ciphers at runtime?

2020-05-25 Thread Daniel Lenski
RSA_DES_192_CBC3_SHA) && m->get_cipher_by_char(ch_SSL3_CK_RSA_RC4_128_SHA)) return 0; return -ENOENT; } On Sun, May 24, 2020 at 2:49 PM Matt Caswell wrote: > > > On 23/05/2020 21:08, Daniel Lenski wrote: > > When OpenConnect is explicitly requested to connect to an

Re: checking for enable-weak-ssl-ciphers at runtime?

2020-05-23 Thread Daniel Lenski
e actually creating an SSL_CTX? On Sat, May 23, 2020 at 1:08 PM Daniel Lenski wrote: > > Hi all, > > What I'm trying to figure out: what's the best way to check whether > 3DES/RC4 support are available in the OpenSSL build we're using, so > that we can give users a

checking for enable-weak-ssl-ciphers at runtime?

2020-05-23 Thread Daniel Lenski
Hi all, What I'm trying to figure out: what's the best way to check whether 3DES/RC4 support are available in the OpenSSL build we're using, so that we can give users a clearer explanation of why a connection to an ancient server fails? Background: I'm one of the developers of OpenConnect and re