Hi, as the normal specification of cipher strings can be somewhat clumsy to use from time to time it would be nice if one could use the raw ID of a cipher (with all the usual operators):
ALL:!0x00c012 Allow everything except TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA HIGH:-AES:+0x00c030 Allow all HIGH secure ciphers except AES, but explicitly include TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 AES256:-0xc030:+AES+GCM Allow AES256, but (soft-)exclude TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, if it's not in the AESGCM ciphers list. Additionally it would be awesome if one could simply use the names as they appear in the RFCs ;-) Regards, BenBE.
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ openssl-dev mailing list To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev
