RafaĆ Radecki
2013-Jul-16 10:45 UTC
[CentOS] curl ciphers name mapping openssl to curl format?
Hi All. In curl manual: --ciphers -> "(SSL) Specifies which ciphers to use in the connection. The list of ciphers must specify valid ciphers. Read up on SSL cipher list details on this URL:http://www.openssl.org/docs/apps/ciphers.html" In openssl: http://www.openssl.org/docs/apps/ciphers.html#CIPHER_SUITE_NAMES there are names such as "SSL_RSA_WITH_RC4_128_SHA RC4-SHA" but curl --ciphers RC4-SHA https://xxx.yyy curl: (59) Unknown cipher in list: RC4-SHA the same for --ciphers SSL_RSA_WITH_RC4_128_SHA the same. But for: curl --ciphers rsa_rc4_128_sha https://xxx.yyy the command works. Can you tell how to map strings from openssl to curl's format? I've searched the web but with no luck ;) Best regards, Rafal Radecki.
From: Rafa? Radecki <radecki.rafal at gmail.com>> In curl manual: > --ciphers -> "(SSL) Specifies which ciphers to use in the connection. > The > list of ciphers must specify valid ciphers. Read up on SSL cipher list > details on this URL:http://www.openssl.org/docs/apps/ciphers.html" > In openssl: http://www.openssl.org/docs/apps/ciphers.html#CIPHER_SUITE_NAMES > there are names such as "SSL_RSA_WITH_RC4_128_SHA RC4-SHA" > but > curl --ciphers RC4-SHA https://xxx.yyy > curl: (59) Unknown cipher in list: RC4-SHA > the same for --ciphers SSL_RSA_WITH_RC4_128_SHA the same. > But for: > curl --ciphers rsa_rc4_128_sha https://xxx.yyy > the command works. Can you tell how to map strings from openssl to curl's > format? I've searched the web but with no luck ;)try the ones in the NSSCipherSuite section of ?https://git.fedorahosted.org/cgit/mod_nss.git/plain/docs/mod_nss.html There seems to be differences between CentOS 6 and CentOS 5. Your working curl cmdline does not work for me on C5, but it works on C6... Then, curl has a '--engine list' option. On C5, I get padlock and dynamic. On C6, I get nothing... JD