Or, a more consise list with only AES, /usr/local/ssl/bin/openssl ciphers -tls1 AES ADH-AES256-SHA:DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA: AES256-SHA:ADH-AES128-SHA:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA: AES128-SHA and, I don't find RSA_WITH_AES_128_SHA. Anybody have any pointers? thanks much,
Sunitha Kumar wrote: > Lutz, > thanks for the pointers. However, this still does not show > RSA_WITH_AES_128_SHA. > > /usr/local/ssl/bin/openssl ciphers > > >DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:AES256-SHA:EDH-RSA-DES-CBC3-SHA:EDH-DSS-DES-CBC3-SHA:DES-CBC3-SHA:DES-CBC3-MD5:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:AES128-SHA:IDEA-CBC-SHA:IDEA-CBC-MD5:RC2-CBC-MD5:DHE-DSS-RC4-SHA:RC4-SHA:RC4-MD5:RC4-MD5:RC4-64-MD5:EXP1024-DHE-DSS-DES-CBC-SHA:EXP1024-DES-CBC-SHA:EXP1024-RC2-CBC-MD5:EDH-RSA-DES-CBC-SHA:EDH-DSS-DES-CBC-SHA:DES-CBC-SHA:DES-CBC-MD5:EXP1024-DHE-DSS-RC4-SHA:EXP1024-RC4-SHA:EXP1024-RC4-MD5:EXP-EDH-RSA-DES-CBC-SHA:EXP-EDH-DSS-DES-CBC-SHA:EXP-DES-CBC-SHA:EXP-RC2-CBC-MD5:EXP-RC2-CBC-MD5:EXP-RC4-MD5:EXP-RC4-MD5 > > Sunitha Kumar wrote: > > > Okay, I found definitions for AES ciphers in ssl/tls1.h > > /* AES ciphersuites from RFC3268 */ > > > > #define TLS1_CK_RSA_WITH_AES_128_SHA 0x0300002F > > #define TLS1_CK_DH_DSS_WITH_AES_128_SHA 0x03000030 > > #define TLS1_CK_DH_RSA_WITH_AES_128_SHA 0x03000031 > > #define TLS1_CK_DHE_DSS_WITH_AES_128_SHA 0x03000032 > > > > So, if I want to set TLS1_CK_RSA_WITH_AES_128_SHA in the cipherlist at the > > client, > > openssl docs recommend using: > > int SSL_CTX_set_cipher_list(SSL_CTX *ctx, char *str); > > However, this takes a char* as the second argument, and there are no strings > > defined for AES cipher suites. > > Any pointes on how I can set this. thanks, > > > > Lutz Jaenicke wrote: > > > > > On Tue, Dec 10, 2002 at 11:41:48AM -0800, Sunitha Kumar wrote: > > > > Hi, > > > > I have openssl-0.9.7-beta3 installed, which said it came with AES > > > > support. I want to set the cipher at the client side > > > > to use AES, and wanted to find out the flag for this ciphersuite. > > > > Looking at man1 ciphers, I did not find any AES ciphers. > > > > Also, using > > > > > > > > openssl ciphers > > > > gave only these. How do I locate AES ciphers? > > > > > > Call "openssl version" and you will most likely find, that you are using > > > another version. > > > You may have to explicitely call "/usr/local/ssl/bin/openssl ciphers" > > > if you installed it into the default locations. > > > > > > Best regards, > > > Lutz > > > -- > > > Lutz Jaenicke [EMAIL PROTECTED] > > > http://www.aet.TU-Cottbus.DE/personen/jaenicke/ > > > BTU Cottbus, Allgemeine Elektrotechnik > > > Universitaetsplatz 3-4, D-03044 Cottbus > > > ______________________________________________________________________ > > > OpenSSL Project http://www.openssl.org > > > User Support Mailing List [EMAIL PROTECTED] > > > Automated List Manager [EMAIL PROTECTED] > > > > -- > > Sunitha Kumar > > http://www.cisco.com > > > > ______________________________________________________________________ > > OpenSSL Project http://www.openssl.org > > User Support Mailing List [EMAIL PROTECTED] > > Automated List Manager [EMAIL PROTECTED] > > -- > Sunitha Kumar > http://www.cisco.com > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List [EMAIL PROTECTED] > Automated List Manager [EMAIL PROTECTED] -- Sunitha Kumar http://www.cisco.com ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
