Hi!
"openssl ciphers" lists DES-CBC-MD5 as a supported cipher method for me so I
fail to understand Courier not accepting such connections.
(On a side note, is it that none of the SSLv2 ciphers work for you?)
Given that TLS_CIPHER_LIST is not disallowing SSLv2 ciphers (as in my case)
why doesn't Courier accept such connections?
TLS_CIPHER_LIST="ALL:!ADH:@STRENGTH" should allow ALL cipher methods except
anonymous DH cipher suites and eNULL.
Also if I try to disable SSLv3 ciphers in TLS_CIPHER_LIST, Courier still
accepts such connections!
I've read that TLS_CIPHER_LIST is passed verbatim to OpenSSL, so in my case
why are the changes I make in TLS_CIPHER_LIST not reflected?? The
TLS_CIPHER_LIST is being completely ignored!
I appreciate your time Sam.
Thanks,
Shehab.
On 26 February 2010 13:27, Sam Varshavchik <[email protected]> wrote:
> Shehab Kazi writes:
>
> Hi Sam!
>> I can access SSLv3/TLSv1 ciphers (like the one you can AES256-SHA) as well
>> but what would be the result if you were to try:
>> openssl s_client -connect <...> -cipher DES-CBC-MD5
>>
>
> That fails irrespective of what TLS_CIPHER_LIST is set to.
>
> "openssl ciphers" does not list "DES-CBC-MD5" as a supported cipher method,
> for me. It list "DES-CBC3-SHA" which works, and "DES-CBC-SHA" which only
> works if TLS_CIPHER_LIST is set to accept weak ciphers.
>
>
>
> ------------------------------------------------------------------------------
> Download Intel® Parallel Studio Eval
> Try the new software tools for yourself. Speed compiling, find bugs
> proactively, and fine-tune applications for parallel performance.
> See why Intel Parallel Studio got high marks during beta.
> http://p.sf.net/sfu/intel-sw-dev
> _______________________________________________
> courier-users mailing list
> [email protected]
> Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
>
>
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
