Re: cipherlist with only tlsv1.3 ciphers reports error?

[PGNet Dev]

On 7/20/19 8:17 AM, Viktor Dukhovni wrote:
On Sat, Jul 20, 2019 at 07:35:49AM -0700, PGNet Dev wrote:
Checking cipherlist for just TLSv1.3 ciphers FAILs here,

        openssl ciphers  -stdname -s -V 
'TTLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-256-GCM-SHA384'
                Error in cipher list

This is expected.  Try:

      openssl ciphers -tls1_3 -stdname -s -V -ciphersuites 
'TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256' 'aNULL'

TLS 1.3 cipher code points are fundamentally different from TLS 1.0–1.2

Thanks, mostly clear now.

You've just not read the documentation carefully.

You're possibly making some not-necessarily valid assumptions about 
who's read what, with what level of 'care', and the clarity of the 
written documents ...