Re: Ciphers EXP1024-RC4-SHA etc supported in 0.9.8m?

2010-07-09 Thread Michael S. Zick
On Fri July 9 2010, Suryya Kumar Jana wrote:
 Hello,
 Would any one please let me know whether the following ciphers are supported
 in 0.9.8m?
 
 1. EXP1024-DHE-DSS-DES-CBC-SHA
 2. EXP1024-RC4-SHA
 3. DHE-DSS-RC4-SHA
 4. EXP1024-DES-CBC-SHA
 
 I just compiled the version and run the utility ./openssl ciphers -v
 'EXP1024-DHE-DSS-RC4-SHA' but it is showing me the following error
 Error in cipher list
 17800:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_
 list:no cipher match:ssl_lib.c:1218:


What does: ./openssl ciphers
return?

My 0.9.8d shows the one you asked about.

Mike 
  I went through the code (not understood clearly) but seen some ciphers list
 (under New TLS Export CipherSuites from expired ID) in s3_lib.c are
 commented out.
 
 Thanks,
 Suryya
 


__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Ciphers EXP1024-RC4-SHA etc supported in 0.9.8m?

2010-07-09 Thread Victor Duchovni
On Fri, Jul 09, 2010 at 12:26:46PM -0500, Michael S. Zick wrote:

 On Fri July 9 2010, Suryya Kumar Jana wrote:
  Hello,

 Would any one please let me know whether the following ciphers are supported
  in 0.9.8m?
  
  1. EXP1024-DHE-DSS-DES-CBC-SHA
  2. EXP1024-RC4-SHA
  3. DHE-DSS-RC4-SHA
  4. EXP1024-DES-CBC-SHA
  
  I just compiled the version and run the utility ./openssl ciphers -v
  'EXP1024-DHE-DSS-RC4-SHA' but it is showing me the following error

These are not the OpenSSL names for them. Pick one or more of:

EXP-ADH-DES-CBC-SHA SSLv3 Kx=DH(512)  Au=None Enc=DES(40)   Mac=SHA1 export
EXP-ADH-RC4-MD5 SSLv3 Kx=DH(512)  Au=None Enc=RC4(40)   Mac=MD5  export
EXP-EDH-RSA-DES-CBC-SHA SSLv3 Kx=DH(512)  Au=RSA  Enc=DES(40)   Mac=SHA1 export
EXP-EDH-DSS-DES-CBC-SHA SSLv3 Kx=DH(512)  Au=DSS  Enc=DES(40)   Mac=SHA1 export
EXP-DES-CBC-SHA SSLv3 Kx=RSA(512) Au=RSA  Enc=DES(40)   Mac=SHA1 export
EXP-RC2-CBC-MD5 SSLv3 Kx=RSA(512) Au=RSA  Enc=RC2(40)   Mac=MD5  export
EXP-RC4-MD5 SSLv3 Kx=RSA(512) Au=RSA  Enc=RC4(40)   Mac=MD5  export
EXP-RC2-CBC-MD5 SSLv2 Kx=RSA(512) Au=RSA  Enc=RC2(40)   Mac=MD5  export
EXP-RC4-MD5 SSLv2 Kx=RSA(512) Au=RSA  Enc=RC4(40)   Mac=MD5  export

Other ciphers are listed via openssl ciphers -v DEFAULT or
openssl ciphers -v ALL

-- 
Viktor.
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org


Re: Ciphers EXP1024-RC4-SHA etc supported in 0.9.8m?

2010-07-09 Thread Michael S. Zick
On Fri July 9 2010, Victor Duchovni wrote:
 On Fri, Jul 09, 2010 at 12:26:46PM -0500, Michael S. Zick wrote:
 
  On Fri July 9 2010, Suryya Kumar Jana wrote:
   Hello,
 
  Would any one please let me know whether the following ciphers are supported
   in 0.9.8m?
   
   1. EXP1024-DHE-DSS-DES-CBC-SHA
   2. EXP1024-RC4-SHA
   3. DHE-DSS-RC4-SHA
   4. EXP1024-DES-CBC-SHA
   
   I just compiled the version and run the utility ./openssl ciphers -v
   'EXP1024-DHE-DSS-RC4-SHA' but it is showing me the following error
 
 These are not the OpenSSL names for them. Pick one or more of:
 
 EXP-ADH-DES-CBC-SHA SSLv3 Kx=DH(512)  Au=None Enc=DES(40)   Mac=SHA1 
 export
 EXP-ADH-RC4-MD5 SSLv3 Kx=DH(512)  Au=None Enc=RC4(40)   Mac=MD5  
 export
 EXP-EDH-RSA-DES-CBC-SHA SSLv3 Kx=DH(512)  Au=RSA  Enc=DES(40)   Mac=SHA1 
 export
 EXP-EDH-DSS-DES-CBC-SHA SSLv3 Kx=DH(512)  Au=DSS  Enc=DES(40)   Mac=SHA1 
 export
 EXP-DES-CBC-SHA SSLv3 Kx=RSA(512) Au=RSA  Enc=DES(40)   Mac=SHA1 
 export
 EXP-RC2-CBC-MD5 SSLv3 Kx=RSA(512) Au=RSA  Enc=RC2(40)   Mac=MD5  
 export
 EXP-RC4-MD5 SSLv3 Kx=RSA(512) Au=RSA  Enc=RC4(40)   Mac=MD5  
 export
 EXP-RC2-CBC-MD5 SSLv2 Kx=RSA(512) Au=RSA  Enc=RC2(40)   Mac=MD5  
 export
 EXP-RC4-MD5 SSLv2 Kx=RSA(512) Au=RSA  Enc=RC4(40)   Mac=MD5  
 export
 
 Other ciphers are listed via openssl ciphers -v DEFAULT or
 openssl ciphers -v ALL
 

Ah, so - a name change somewhere between 0.9.8d and 0.9.8g
Present in -d, renamed or gone in -g so probably also renamed or gone in -m

Mike
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   majord...@openssl.org