Re: What is the algorithm of choice cipher suite for connection by Server?

2013-12-23 Thread Sri Ramya
hi, please go through the below link.. http://www.openssl.org/docs/apps/ciphers.html On Mon, Dec 23, 2013 at 10:53 AM, Vladimir Belov wrote: > Hi, > On Server we have an ordered list of cipher suits. Server gets a cipher > suits of client in ClientHello. What is the algorithm of choice cipher >

Re: What is the algorithm of choice cipher suite for connection by Server?

2013-12-23 Thread Vladimir Belov
2013/12/23 Sri Ramya > > hi, > please go through the below link.. > http://www.openssl.org/docs/apps/ciphers.html There is no answer to the question "What is the algorithm of choice cipher suite for connection by Server?" About "Сipher suits for different TLS versions" i started a new email ques

Сipher suits for different TLS versions

2013-12-23 Thread Vladimir Belov
Сommand options -ssl3 and -tls1 don't work properly. They show also TLS 1.2 cipher suits. __ OpenSSL Project http://www.openssl.org User Support Mailing Listopenssl-users@openssl.

RE: What is the algorithm of choice cipher suite for connection by Server?

2013-12-23 Thread Dave Thompson
The RFC only says the server “select[s]” from the ClientHello list. There are two obvious ways, and openssl implements both. “client preference” – server chooses the first entry in the client’s list that the server can support “server preference” – server chooses the first entry in its own lis

Re: What is the algorithm of choice cipher suite for connection by Server?

2013-12-23 Thread Vladimir Belov
Thank you very much, Dave, for the answer and detailed explanation. And just one question. Is there any possibility to set different cipher suits for different versions of TLS? For example, I want to exclude RC4 cipher suits wholly for TLS 1.2/1.1 and leave them only for <=TLS 1.0 The reason is t