Re: How to set cipher

[Quanah Gibson-Mount]

--On Thursday, December 17, 2020 4:25 PM +0530 Puranjay Pradhan 
<puranjaya.prad...@gmail.com> wrote:



I am trying to set cipher list as like below :


std::string ciphers =
"AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:AES128-GCM-SHA256:AES128-SHA2
56:AES128-SHA"



returnCode = ldap_set_option(NULL, LDAP_OPT_X_TLS_CIPHER_SUITE,
ciphers.c_str());



But, it returns an error : "TLS could not set cipher list ....."


Can anyone suggest what is the right way of doing this?

First, what TLS library is your libldap linked to?  Different OSes link to 
different TLS libraries which have different cipher suite string 
requirements.

Regards,
Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>