On Wed, Mar 04, 2015 at 06:36:07PM +0200, Adrian Minta wrote:
Thank you for the answer. The "!EXPORT" part is included in "ECDH@STRENGTH:DH@STRENGTH:HIGH", or it must be added as well ?
This is not the cipher list I sent. It was: ECDH@STRENGTH:DH@STRENGTH:HIGH:!RC4:!MD5:!DES:!aNULL:!eNUL
Mine does not contain any export cipher, yours does. You can use openssl ciphers to compare cipher lists:
$ openssl ciphers EXPORT|tr ':' '\n' |sort > export
$ openssl ciphers ECDH@STRENGTH:DH@STRENGTH:HIGH:!RC4:!MD5:!DES:!aNULL:!eNULL
|tr ':' '\n' |sort> manu
$ openssl ciphers ECDH@STRENGTH:DH@STRENGTH:HIGH |tr ':' '\n' |sort > adrian
$ join export manu
(nothing)
$ join export adrian
EXP-ADH-DES-CBC-SHA
EXP-ADH-RC4-MD5
EXP-EDH-DSS-DES-CBC-SHA
EXP-EDH-RSA-DES-CBC-SHA
-- Emmanuel Dreyfus manu@netbsd.org