Re: [Cryptography-dev] set_cipher_list() API Question

2017-07-03 Thread Cory Benfield
The “sslv3” text is misleading: it simply relates to the way the OpenSSL internals are structured. Similarly, TLS_EMPTY_RENEGOTIATION_INFO_SCSV is a “dummy” cipher suite used to signal to the server that renegotiation using RFC 5746 is supported: it’s not an actual cipher suite. This error is a

Re: [Cryptography-dev] set_cipher_list() API Question

2017-07-03 Thread Karan karan
I set : cont.set_cipher_list('ECDHE-ECDSA-AES128-GCM-SHA256') but i see the following error in the logs : connected ('**.**.**.**', 443) Traceback (most recent call last): File "test_ex.py", line 83, in main() File "test_ex.py", line 65, in main cont, initial_session, ssl_conn, tcp_c

Re: [Cryptography-dev] set_cipher_list() API Question

2017-07-03 Thread Tristan Seligmann
On Mon, 3 Jul 2017 at 15:18 Karan karan wrote: > #cont.set_cipher_list('ECDHE-ECDSA-AES128-GCM-SHA256') > I believe this is the correct spelling, and it works for me. Perhaps your OpenSSL does not have this cipher compiled in? If you run `openssl ciphers ECDHE-ECDSA-AES128-GCM-S