Re: [openssl-users] How to sort cipher list by ephemeral/non-ephemeral?

2016-11-07 Thread Salz, Rich
You can't do it with keywords. Be explicit about what you want and put it in the order you want. That way you will not be surprised when the expansion of a keyword changes. >From your list, ECDHE first, then decide RSA/ECDSA. Then AES-GCM. Why do you >care about sha384 vs 256? Do you really

[openssl-users] How to sort cipher list by ephemeral/non-ephemeral?

2016-11-07 Thread Jeffrey Walton
I prefer to use a cipher list like "HIGH:!aNULL:!RC4:!MD5". I prefer it because its fairly easy to parse and understand. Its also easy to teach to developers. I want the resulting ciphers sorted with the ephemeral suites at the head of the list. How does one sort the list with ephemeral suites