Mads Toftum wrote: > On Sun, Aug 06, 2000 at 01:04:38PM -0400, Ben Hyde wrote: > > The following presumably explains that problem. > > > > OpenSSL> version > > OpenSSL 0.9.4 09 Aug 1999 > > OpenSSL> ciphers -v 'ALL:-SSLv3' > > RC4-64-MD5 SSLv2 Kx=RSA Au=RSA Enc=RC4(64) Mac=MD5 > > DES-CBC3-MD5 SSLv2 Kx=RSA Au=RSA Enc=3DES(168) Mac=MD5 > > DES-CBC-MD5 SSLv2 Kx=RSA Au=RSA Enc=DES(56) Mac=MD5 > > IDEA-CBC-MD5 SSLv2 Kx=RSA Au=RSA Enc=IDEA(128) Mac=MD5 > > RC2-CBC-MD5 SSLv2 Kx=RSA Au=RSA Enc=RC2(128) Mac=MD5 > > EXP-RC2-CBC-MD5 SSLv2 Kx=RSA(512) Au=RSA Enc=RC2(40) Mac=MD5 export > > RC4-MD5 SSLv2 Kx=RSA Au=RSA Enc=RC4(128) Mac=MD5 > > EXP-RC4-MD5 SSLv2 Kx=RSA(512) Au=RSA Enc=RC4(40) Mac=MD5 export > > OpenSSL> ciphers -v 'ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP' > > RC4-64-MD5 SSLv2 Kx=RSA Au=RSA Enc=RC4(64) Mac=MD5 > > OpenSSL> exit > > > Now that's not a lot - I don't have an 0.9.4 handy, but it seems like you've > got a strange problem. For the first, I get the same - but for the second > I get something like 23! My numbers is for a version of openssl somewhere > after 0.9.5a, but that still shouldn't explain the huge difference. > I suggest you grab an 0.9.5a from www.openssl.org and try your luck with it. > > vh > > Mads Toftum yes, I should have mentioned 0.9.5a does provide more alternatives. $ apps/openssl version OpenSSL 0.9.5a 1 Apr 2000 $ for i in ALL ALL:-SSLv3 ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP ; do printf "%3d %s\n" `apps/openssl ciphers -v $i | wc -l` $i ; done 34 ALL 8 ALL:-SSLv3 23 ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP "The paradox of information retrieval is that a person must describe the information that he or she does not have." -- Christine L. Borgman ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
