cipherlist with only tlsv1.3 ciphers reports error?
PGNet Dev
pgnet.dev at gmail.com
Fri Jul 19 21:31:11 UTC 2019
>>> Configuration file difference?
>
>> which config file are you referring to?
>
> The default OpenSSL configuration file. openssl.cnf, in the directory displayed by "openssl version -d". But I can't think offhand of anything in the configuration file that I'd expect to have this sort of effect. I don't think even engines would normally have any effect on cipher-list processing this way.
fyi, here
/usr/bin/openssl version -v
OpenSSL 1.1.0i-fips 14 Aug 2018
/usr/bin/openssl version -d
OPENSSLDIR: "/etc/ssl"
find /etc/ssl -type f | grep cnf
/etc/ssl/openssl.cnf
/usr/local/ssl-test/bin/openssl version -v
OpenSSL 1.1.1c 28 May 2019
/usr/local/ssl-test/bin/openssl version -d
OPENSSLDIR: "/usr/local/ssl-test"
find /usr/local/ssl-test -type f | grep cnf
(empty)
More information about the openssl-users
mailing list