On 09/10/99, William M. Perry said:
>I couldn't find any way to do it either.  What I eventually settled for was
>looping through the ciphers list at runtime and disabling specific ciphers
>that do not meet our current export level.  We have 3 levels of
>exportability - domestic (128-bit), export56 (56-bit), and export40
>(40-bit).

I did this for SSLeay-0.9.0b -- it was just a lot of work.  I went in and
peppered #if !defined(EXPORT_ONLY) around all the non-exportable ciphers.
The ones that are a real pain are the DES family...others are pretty quick.

--Chris
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to