Right. It might just be my Hiberno English, as my usage of the word "issue" 
wasn't meant to indicate a flaw. In this case, I intended it to mean the source 
of the behaviour I was seeing.

Anyway, I'll look into upgrading OpenSSL.

many thanks!
Brian

________________________________
From: Gustaf Neumann <neum...@wu.ac.at>
Sent: Tuesday 24 March 2020 07:53
To: naviserver-devel@lists.sourceforge.net 
<naviserver-devel@lists.sourceforge.net>
Subject: Re: [naviserver-devel] nsssl: error loading ciphers


This message's attachments contains at least one web link. This is often used 
for phishing attempts. Please only interact with this attachment if you know 
its source and that the content is safe. If in doubt, confirm the legitimacy 
with the sender by phone.


i would not call it an "issue" (this has often a connotation of a flaw),
but it is not supported yet in the version you are using. You need probably
OpenSSL 1.1.1 or newer.


You can check as well


   ciphers -v | grep TLSv1.3


to see the proper Cipher Suite Names (IANA) usable for e.g. TLSv1.3

-gn


On 23.03.20 18:08, Brian Fenton wrote:
Hi Gustaf

Ah this is an OpenSSL issue, not Naviserver. No, those ciphers are not listed 
when I type openssl list -cipher-algorithms

This is on Windows 2012 Server and OpenSSL version is
OpenSSL 1.1.0e  16 Feb 2017

thanks
Brian

________________________________
From: Gustaf Neumann <neum...@wu.ac.at><mailto:neum...@wu.ac.at>
Sent: Monday 23 March 2020 17:02
To: 
naviserver-devel@lists.sourceforge.net<mailto:naviserver-devel@lists.sourceforge.net>
 
<naviserver-devel@lists.sourceforge.net><mailto:naviserver-devel@lists.sourceforge.net>
Subject: Re: [naviserver-devel] nsssl: error loading ciphers



This message's attachments contains at least one web link. This is often used 
for phishing attempts. Please only interact with this attachment if you know 
its source and that the content is safe. If in doubt, confirm the legitimacy 
with the sender by phone.


Dear Brian,

What version of OpenSSL are you using on what OS?
Are these ciphers available in this OpenSSL implementation?

    openssl list -cipher-algorithms

It might be possible, that the same version of OpenSSL has on different
platforms/distributions different ciphers included.

All the best
-g

On 23.03.20 17:23, Brian Fenton wrote:
error loading ciphers: 
TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256




_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net<mailto:naviserver-devel@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/naviserver-devel

_______________________________________________
naviserver-devel mailing list
naviserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/naviserver-devel

Reply via email to