Re: [nodejs] Re: NodeJS with ECDHE ECC Certificate

2016-04-26 Thread Eugene Williams
[SOLVED] Sometimes the shortest responses are the most profound. Thanks to everyone who contributed. Ben, you saved my sanity, my hours, in some ways my life. Although I'd upgraded nodejs to version 5.10 under the current user (AWS ec2-user), this latest version was installed to

[nodejs] Re: NodeJS with ECDHE ECC Certificate

2016-04-26 Thread johnny somethingerman
Did you also update the -ciphers option in your openssl s_client command? -- Job board: http://jobs.nodejs.org/ New group rules: https://gist.github.com/othiym23/9886289#file-moderation-policy-md Old group rules: https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines --- You

Re: [nodejs] Re: NodeJS with ECDHE ECC Certificate

2016-04-26 Thread Ben Noordhuis
On Mon, Apr 25, 2016 at 11:34 AM, Eugene Williams wrote: > Thanks again for the suggestion Johnny. > > I updated the server configuration with the new cipher suite. The final > setup is: > > var ciphersall = >

[nodejs] Re: NodeJS with ECDHE ECC Certificate

2016-04-25 Thread Eugene Williams
Thanks again for the suggestion Johnny. I updated the server configuration with the new cipher suite. The final setup is: var ciphersall =

[nodejs] Re: NodeJS with ECDHE ECC Certificate

2016-04-22 Thread johnny somethingerman
Yes, sorry for my ramblings, it was late and there was information I totally left off that would have made the last part of the comment make actual sense.. The end of my comment is the important part about changing your cipher suite. You see, you used the option "-cipher

[nodejs] Re: NodeJS with ECDHE ECC Certificate

2016-04-22 Thread Eugene Williams
Thanks for the comment Johnny. It's a good idea to install wireshark. I'll do that and run some tests. Changing the "honorCipherOrder" parameter had no effect. -Eugene On Thursday, April 21, 2016 at 9:46:24 PM UTC-7, johnny somethingerman wrote: > > I'm not an SSL expert, and probably only a

[nodejs] Re: NodeJS with ECDHE ECC Certificate

2016-04-21 Thread johnny somethingerman
I'm not an SSL expert, and probably only a few people on this list are, but my hunch is you are doing something wrong with your config and the "honorCipherOrder: true" property of your opetions objet is causing it to show up in node.js when it didn't in openssl s_server. That hex blob the