Patrick wrote: > > When I call SSL_CipherPrefSetDefault with: > cipher = SSL_RSA_EXPORT_WITH_DES40_CBC_SHA > enabled = 1 > I get the NSS error: "An unknown SSL cipher suite has been requested" > Why?
Because NSS does not implement any of the DES40 ciphersuites. > I don't have that problem with any other cipher listed on page > http://mozilla.org/projects/security/pki/nss/ref/ssl/sslfnc.html#1084747 You have found an error on that page. That ciphersuite should not be listed on that page. The list of implemented ciphersuites that is most trustworthy is found at http://lxr.mozilla.org/mozilla/source/security/nss/lib/ssl/sslenum.c#43 This is the same list your program would find if your program used the list of supported ciphersuites declared in ssl.h. > -- POC -- Nelson Bolyard Netscape Communications (subsidiary of AOL) Disclaimer: I speak for myself, not for Netscape
