Using mod_nss version 1.0.12-1.fc23 on fedora

Is there a way to specify the ordering if of suites in the NSSCipherSuites
directive?

I have done some testing with curl,

For example:

Client asserts: rsa_aes_256_sha, rsa_aes_128_sha

Server Accepts:  +rsa_aes_256_sha,+rsa_aes_128_sha

Negotiated: rsa_aes_128_sha



Client asserts: rsa_aes_128_sha, rsa_aes_256_sha

Server Accepts:  +rsa_aes_256_sha,+rsa_aes_128_sha

Negotiated: rsa_aes_128_sha





Client asserts: rsa_aes_256_sha, rsa_aes_128_sha

Server Accepts:  +rsa_aes_128_sha, +rsa_aes_256_sha,

Negotiated: rsa_aes_128_sha



Client asserts: rsa_aes_128_sha, rsa_aes_256_sha

Server Accepts:  +rsa_aes_128_sha, +rsa_aes_256_sha,

Negotiated: rsa_aes_128_sha



Control test:

Client asserts: rsa_aes_256_sha

Server Accepts:  +rsa_aes_128_sha, +rsa_aes_256_sha,

Negotiated: rsa_aes_256_sha


Thanks
_______________________________________________
Mod_nss-list mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/mod_nss-list

Reply via email to