Can Openssl still use a null cipher?
Bryan Henderson <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.user |
|---|---|
| Message-ID | <[email protected]> |
I used to use the *openssl* program to demonstrate a client/server connection with no certificates (*openssl s_server -nocert*), using *$ openssl s_client -cipher AECDH-NULL-SHA ...* on the client side. After a software upgrade, *-trace* indicates that the cipher suites the client actually proposes are *TLS_AES_256_GCM_SHA384*, * TLS_CHACHA20_POLY1305_SHA256*,* TLS_AES_128_GCM_SHA256*, and *TLS_EMPTY_RENEGOTIATION_INFO_SCSV* and the handshake fails with no shared cipher. Why does Openssl ignore my cipher request, and is there any other way to do a certificate-free connection? -- You received this message because you are subscribed to the Google Groups "openssl-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/0bbc02c8-59ff-4ffc-8070-0e4c33caa958n%40openssl.org.