Re: Enabling RC4 from command line tools in OpenSSL 3.1

Viktor Dukhovni <[email protected]>
Newsgroups gmane.comp.encryption.openssl.user
Message-ID <[email protected]>
On Fri, Sep 06, 2024 at 06:56:41PM +0000, 'Ladd, Watson' via openssl-users wrote:
> 
> That was a very good idea, but sadly still doesn't work
> 
> 
> DYLD_LIBRARY_PATH=`cd .. && pwd` ./openssl s_client -tls1 -cipher RC4  -provider-path /Users/wladd/code/openssl/providers/ -provider legacy
> 
> 004CA1EE01000000:error:0A0000A1:SSL routines:SSL_CTX_new_ex:library has no ciphers:ssl/ssl_lib.c:3474
> 
> 
> Suspect something went awry in configuring compiling that.

You still need the default provider for the KEX and MAC algorithms, ...

    $ ./util/wrap.pl ./apps/openssl ciphers -tls1_2 -s -v -provider legacy RC4:@SECLEVEL=0
    80BBAB49927F0000:error:0A0000A1:SSL routines:SSL_CTX_new_ex:library has no ciphers:ssl/ssl_lib.c:3977:

    $ ./util/wrap.pl ./apps/openssl ciphers -tls1_2 -s -v -provider default -provider legacy RC4:@SECLEVEL=0
    ECDHE-ECDSA-RC4-SHA            TLSv1   Kx=ECDH     Au=ECDSA Enc=RC4(128)               Mac=SHA1
    ECDHE-RSA-RC4-SHA              TLSv1   Kx=ECDH     Au=RSA   Enc=RC4(128)               Mac=SHA1
    AECDH-RC4-SHA                  TLSv1   Kx=ECDH     Au=None  Enc=RC4(128)               Mac=SHA1
    ADH-RC4-MD5                    SSLv3   Kx=DH       Au=None  Enc=RC4(128)               Mac=MD5
    RC4-SHA                        SSLv3   Kx=RSA      Au=RSA   Enc=RC4(128)               Mac=SHA1
    RC4-MD5                        SSLv3   Kx=RSA      Au=RSA   Enc=RC4(128)               Mac=MD5

-- 
    Viktor.

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion on the web visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/ZttaikEHT8_RMcN6%40chardros.imrryr.org.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.