RE: cipher list experiments - what's preventing ECDHE?

2014-06-26 Thread mclellan, dave
+-+-+-+-+-+-+-+-+- -Original Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Viktor Dukhovni Sent: Thursday, June 26, 2014 9:46 AM To: OpenSSL Users List Subject: Re: cipher list experiments - what's preventing ECDHE? On Thu, Jun 26, 2014

RE: cipher list experiments - what's preventing ECDHE?

2014-06-26 Thread mclellan, dave
ne 26, 2014 9:29 AM To: openssl-users@openssl.org Subject: Re: cipher list experiments - what's preventing ECDHE? On Thu, Jun 26, 2014, mclellan, dave wrote: > I'm doing some experimentation with cipher lists using OpenSSL 1.0.1h. I > have two peers using the same libraries,

RE: cipher list experiments - what's preventing ECDHE?

2014-06-26 Thread mclellan, dave
al Message- From: owner-openssl-us...@openssl.org [mailto:owner-openssl-us...@openssl.org] On Behalf Of Jeffrey Walton Sent: Thursday, June 26, 2014 9:31 AM To: OpenSSL Users List Subject: Re: cipher list experiments - what's preventing ECDHE? On Thu, Jun 26, 2014 at 8:51 AM, mclellan, dav

Re: cipher list experiments - what's preventing ECDHE?

2014-06-26 Thread Viktor Dukhovni
On Thu, Jun 26, 2014 at 09:30:49AM -0400, Jeffrey Walton wrote: > > 1. ECDHE-ECDSA-AES128-GCM-SHA256 > > > > 2. ECDHE-RSA-AES128-GCM-SHA256 > > > > 3. DHE-RSA-AES128-GCM-SHA256 > > The server needs an ECDSA key and certifcate to provide ECDSA. Its not > clear if you have it. Onl

Re: cipher list experiments - what's preventing ECDHE?

2014-06-26 Thread Jeffrey Walton
On Thu, Jun 26, 2014 at 8:51 AM, mclellan, dave wrote: > I’m doing some experimentation with cipher lists using OpenSSL 1.0.1h. I > have two peers using the same libraries, and both enabled with these suites > in the call to SSL_set_cipher_list(): > > > 1. ECDHE-ECDSA-AES128-GCM-SHA256 >

Re: cipher list experiments - what's preventing ECDHE?

2014-06-26 Thread Dr. Stephen Henson
On Thu, Jun 26, 2014, mclellan, dave wrote: > I'm doing some experimentation with cipher lists using OpenSSL 1.0.1h. I > have two peers using the same libraries, and both enabled with these suites > in the call to SSL_set_cipher_list(): > > > 1. ECDHE-ECDSA-AES128-GCM-SHA256 > > 2.

Re: cipher list??

2005-12-15 Thread Perry L. Jones
as posted before you can run the command openssl ciphers -v and it will print a list for you. Perry stone wrote: > Hi: > Can anybody tell me where can i find the cipher list of SSL in the > files of openssl? I mean the combination of algorithms which the > server support during a handshake. I

Re: cipher list

2004-11-11 Thread Lutz Jaenicke
On Thu, Nov 11, 2004 at 01:01:03PM +0100, kankedu wrote: > Thanks, both of you. Unfortunately I see that I wasn't precise enough as to > what the problem was. > > I know how to use SSL_CTX_set_cipher_list. The problem is that the second > parameter, the cipher list (char*), doesn't accept explic

RE: cipher list

2004-11-11 Thread kankedu
Thanks, both of you. Unfortunately I see that I wasn't precise enough as to what the problem was. I know how to use SSL_CTX_set_cipher_list. The problem is that the second parameter, the cipher list (char*), doesn't accept explicit ciphers (as for example "TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA"), o

RE: cipher list

2004-11-11 Thread Greaney, Kevin
Hi, I would start at the following page in the documentation: http://www.openssl.org/docs/ssl/SSL_get_ciphers.html It not only gives you the details for get_ciphers, but it also provides link to the related APIs. Kevin. -Original Message- From: [EMAIL PROTECTED] [mailto

Re: cipher list

2004-11-11 Thread Bernhard Froehlich
kankedu wrote: Hi, I want to tell my client to only use certain ciphers, and I have found just the funtion for doing so: SSL_CTX_set_cipher_list(*ctx, "RSA"); However, this doesn't give me good enough control on exactly which ciphers to use, only classes. E.g. I cannot write "TLS_DHE_RSA_WITH_

Re: Cipher list

2001-08-02 Thread Dr S N Henson
Martin Sjgren wrote: > > Hello > > Is there a way to get a list of cipher strings for all the ciphers > currently in openssl, or do I have to do what apps/enc.c does? I.E. check > a lot of NO_* macros and hope that the constant exist? > My initial thought was that you couldn't. However on ex

Re: Cipher list

2001-08-01 Thread Martin Sjögren
On Wed, Aug 01, 2001 at 12:09:50PM +0200, Lutz Jaenicke wrote: > On Wed, Aug 01, 2001 at 10:33:33AM +0200, Martin Sjögren wrote: > > Is there a way to get a list of cipher strings for all the ciphers > > currently in openssl, or do I have to do what apps/enc.c does? I.E. check > > a lot of NO_* ma

Re: Cipher list

2001-08-01 Thread Lutz Jaenicke
On Wed, Aug 01, 2001 at 10:33:33AM +0200, Martin Sjögren wrote: > Hello > > Is there a way to get a list of cipher strings for all the ciphers > currently in openssl, or do I have to do what apps/enc.c does? I.E. check > a lot of NO_* macros and hope that the constant exist? man SSL_get_ciphers,