On Tuesday 14 July 2015 08:36:51 David Thompson via RT wrote:
> > From: openssl-dev On Behalf Of James A. T. Rice via RT
> > Sent: Saturday, July 11, 2015 17:19
> > 
> > From https://www.ietf.org/rfc/rfc4346.txt
> > 
> >      CipherSuite TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA      = { 0x00,0x16 };
> > 
> > From https://www.openssl.org/docs/apps/ciphers.html
> > 
> >   TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA       DHE-RSA-DES-CBC3-SHA
> > 
> > From ‘openssl ciphers -V | grep 0x16’
> > 
> >            0x00,0x16 - EDH-RSA-DES-CBC3-SHA    SSLv3 Kx=DH       Au=RSA
> > 
> > Enc=3DES(168) Mac=SHA1
> > 
> > DHE-RSA-DES-CBC3-SHA (on the website) vs
> > EDH-RSA-DES-CBC3-SHA (actually usuable)
> 
> OpenSSL used nonstandard spelling EDH for 6 old suites;
> 1.0.2 (post-beta) added "correct" spelling DHE as an alias.
> Website doc is for current (development) version; doc for
> older versions is included in the tarballs for those versions.

given that situations like this come up relatively often, maybe publishing man 
pages for all supported versions with a drop down to switch between them[1] 
would be a good idea...

 1 - python docs style: https://docs.python.org/2/library/subprocess.html see 
     top left
-- 
Regards,
Hubert Kario
Quality Engineer, QE BaseOS Security team
Web: www.cz.redhat.com
Red Hat Czech s.r.o., Purkyňova 99/71, 612 45, Brno, Czech Republic

Attachment: signature.asc
Description: PGP signature

_______________________________________________
openssl-dev mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-dev

Reply via email to