RE: What is the algorithm of choice cipher suite for connection by Server?

2013-12-30 Thread Dave Thompson
From: owner-openssl-users On Behalf Of Vladimir Belov Sent: Monday, December 23, 2013 23:13 And just one question. Is there any possibility to set different cipher suits for different versions of TLS? Certainly not released. For example, I want to exclude RC4 cipher suits wholly for TLS

Re: What is the algorithm of choice cipher suite for connection by Server?

2013-12-23 Thread Sri Ramya
hi, please go through the below link.. http://www.openssl.org/docs/apps/ciphers.html On Mon, Dec 23, 2013 at 10:53 AM, Vladimir Belov vladimbe...@gmail.comwrote: Hi, On Server we have an ordered list of cipher suits. Server gets a cipher suits of client in ClientHello. What is the algorithm

Re: What is the algorithm of choice cipher suite for connection by Server?

2013-12-23 Thread Vladimir Belov
2013/12/23 Sri Ramya ramya.1...@gmail.com hi, please go through the below link.. http://www.openssl.org/docs/apps/ciphers.html There is no answer to the question What is the algorithm of choice cipher suite for connection by Server? About Сipher suits for different TLS versions i started a

RE: What is the algorithm of choice cipher suite for connection by Server?

2013-12-23 Thread Dave Thompson
The RFC only says the server “select[s]” from the ClientHello list. There are two obvious ways, and openssl implements both. “client preference” – server chooses the first entry in the client’s list that the server can support “server preference” – server chooses the first entry in its own

Re: What is the algorithm of choice cipher suite for connection by Server?

2013-12-23 Thread Vladimir Belov
Thank you very much, Dave, for the answer and detailed explanation. And just one question. Is there any possibility to set different cipher suits for different versions of TLS? For example, I want to exclude RC4 cipher suits wholly for TLS 1.2/1.1 and leave them only for =TLS 1.0 The reason is