cipherlist with only tlsv1.3 ciphers reports error?
PGNet Dev
pgnet.dev at gmail.com
Fri Jul 19 21:16:30 UTC 2019
> Works for me:
> $ openssl ciphers -stdname -s -V 'TTLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-256-GCM-SHA384'
simplifying to build defaults
./config -v \
--prefix=/usr/local/ssl-test \
--openssldir=/usr/local/ssl-test \
--libdir=lib64 \
-Wl,-rpath=/usr/local/ssl-test/lib64
make depend
make
builds with no apparent errors.
tests pass
make test
...
All tests successful.
Files=155, Tests=1410, 187 wallclock secs ( 7.50 usr 1.48 sys + 159.26 cusr 37.30 csys = 205.54 CPU)
Result: PASS
make[1]: Leaving directory '/usr/local/src/openssl11/openssl-1.1.1c'
and after install
make install_sw
reports
/usr/local/ssl-test/bin/openssl version
OpenSSL 1.1.1c 28 May 2019
/usr/local/ssl-test/bin/openssl version -f -p
platform: linux-x86_64
compiler: /usr/bin/gcc-9 -fPIC -pthread -m64 -Wa,--noexecstack -Wall -O3 -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_PIC -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DKECCAK1600_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DX25519_ASM -DPOLY1305_ASM -DNDEBUG
ldd /usr/local/ssl-test/bin/openssl
linux-vdso.so.1 (0x00007ffe91be9000)
libssl.so.1.1 => /usr/local/ssl-test/lib64/libssl.so.1.1 (0x00007f5e52c96000)
libcrypto.so.1.1 => /usr/local/ssl-test/lib64/libcrypto.so.1.1 (0x00007f5e527b0000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f5e525ac000)
libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f5e5238e000)
libc.so.6 => /lib64/libc.so.6 (0x00007f5e51fd4000)
/lib64/ld-linux-x86-64.so.2 (0x00007f5e531df000)
still fails as above,
/usr/local/ssl-test/bin/openssl ciphers -v 'TTLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-256-GCM-SHA384'
Error in cipher list
139704422536256:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:ssl/ssl_lib.c:2549:
/usr/local/ssl-test/bin/openssl ciphers -v ECDHE-ECDSA-AES256-GCM-SHA384
TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD
TLS_CHACHA20_POLY1305_SHA256 TLSv1.3 Kx=any Au=any Enc=CHACHA20/POLY1305(256) Mac=AEAD
TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD
ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(256) Mac=AEAD
also, checking the DISTRO-build,
/usr/bin/openssl version
OpenSSL 1.1.0i-fips 14 Aug 2018
fails too,
/usr/bin/openssl ciphers -v 'TTLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-256-GCM-SHA384'
Error in cipher list
140437655795520:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:ssl/ssl_lib.c:2193:
More information about the openssl-users
mailing list