Re: How does cipher selection and TLS protocol negotiation interact

2012-06-16 Thread Dr. Stephen Henson
On Fri, Jun 15, 2012, Erik Forsberg wrote: > To answer my own question, seems the code that generates the > SSL_CIPHER_description() output does not make any difference between SSLv3, > TLSv1.0 > and TLSv1.1. Only TLSv1.2 is displayed as such. So in my case, I probably > did have a TLSv1 connectio

RE: How does cipher selection and TLS protocol negotiation interact

2012-06-15 Thread Erik Forsberg
that TLSv1 in the cipher string disables TLSv1.2 ciphers ? I didnt expect that. >-- Original Message -- >Date: Fri, 15 Jun 2012 14:34:27 -0700 >From: "Erik Forsberg" >Subject: How does cipher selection and TLS protocol negotiation interact >To: openssl-users@openssl.org

How does cipher selection and TLS protocol negotiation interact

2012-06-15 Thread Erik Forsberg
I have a weird case that I cannot properly explain. Using OpenSSL 1.0.1c for both client and server, I was testing various combinations of ciphers and protocol version requests. Basically, the server uses SSLv23_server_method(). The client code uses SSLv23_client_method() and SSL_OP_NO_SSLv2 Then